Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in Icinga before 1.4.1, when escape_html_tags is disabled, allow remote attackers to inject arbitrary web script or HTML via a JavaScript expression, as demonstrated by the onload attribute of a BODY element located after a check-host-alive! sequence, a different vulnerability than CVE-2011-2179.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2011-06-14T17:00:00
Updated: 2024-08-06T23:00:33.969Z
Reserved: 2011-06-14T00:00:00
Link: CVE-2011-2477
Vulnrichment
No data.
NVD
Status : Modified
Published: 2011-06-14T17:55:06.517
Modified: 2024-11-21T01:28:21.923
Link: CVE-2011-2477
Redhat
No data.