| Package | Affected versions | Patched versions |
|---|---|---|
| pnp4nagios | = 0.6.0= 0.6.1= 0.6.10= 0.6.11= 0.6.12= 0.6.13= 0.6.14= 0.6.15= 0.6.16= 0.6.17= 0.6.18= 0.6.19= 0.6.2= 0.6.20= 0.6.3= 0.6.4= 0.6.5= 0.6.6= 0.6.7≤ 0.6.21 |
Multiple cross-site scripting (XSS) vulnerabilities in PNP4Nagios through 0.6.22 allow remote attackers to inject arbitrary web script or HTML via the URI used for reaching (1) share/pnp/application/views/kohana_error_page.php or (2) share/pnp/application/views/template.php, leading to improper handling within an http-equiv="refresh" META element.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free