| Package | Affected versions | Patched versions |
|---|---|---|
| cacti | = 0.8= 0.8.1= 0.8.2= 0.8.2a= 0.8.3= 0.8.3a= 0.8.4= 0.8.5= 0.8.5a= 0.8.6= 0.8.6a= 0.8.6b= 0.8.6c= 0.8.6d= 0.8.6e= 0.8.6f= 0.8.6g= 0.8.6h= 0.8.6i= 0.8.6j= 0.8.6k= 0.8.7= 0.8.7a= 0.8.7b= 0.8.7c= 0.8.7d= 0.8.7e= 0.8.7f= 0.8.7g= 0.8.7h= 0.8.7i= 0.8.8= 0.8.8a≤ 0.8.8b |
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the step parameter to install/index.php or (2) the id parameter to cacti/host.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free