CVE-2008-1360

Cross-site scripting (XSS) vulnerability in Nagios before 2.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors to unspecified CGI scripts, a different issue than CVE-2007-5624.

Link	Resource
http://www.nagios.org/development/changelog.php#2x_branch
http://www.securityfocus.com/bid/28250	Patch
http://secunia.com/advisories/29363	Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:067
http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
http://www.vupen.com/english/advisories/2008/0900/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41210

Configuration 1

cpe:2.3:a:nagios:nagios:2.7:*:*:*:*:*:*:* cpe:2.3:a:nagios:nagios:2.3.1:*:*:*:*:*:*:* cpe:2.3:a:nagios:nagios:2.2:*:*:*:*:*:*:* cpe:2.3:a:nagios:nagios:2.8:*:*:*:*:*:*:* cpe:2.3:a:nagios:nagios:2.10:*:*:*:*:*:*:* cpe:2.3:a:nagios:nagios:2.3:*:*:*:*:*:*:* cpe:2.3:a:nagios:nagios:2.9:*:*:*:*:*:*:*

---

Published : 2008-03-17 05:44

Updated : 2017-08-08 01:30

---

NVD link : CVE-2008-1360

Mitre link : CVE-2008-1360

No products.

CWE-79