{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-07-12T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via (1) the name element in an XML template to templates_import.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via vectors related to (2) cdef.php, (3) data_input.php, (4) data_queries.php, (5) data_sources.php, (6) data_templates.php, (7) gprint_presets.php, (8) graph.php, (9) graphs_new.php, (10) graphs.php, (11) graph_templates_inputs.php, (12) graph_templates_items.php, (13) graph_templates.php, (14) graph_view.php, (15) host.php, (16) host_templates.php, (17) lib/functions.php, (18) lib/html_form.php, (19) lib/html_form_template.php, (20) lib/html.php, (21) lib/html_tree.php, (22) lib/rrd.php, (23) rra.php, (24) tree.php, and (25) user_admin.php."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://svn.cacti.net/viewvc?view=rev&revision=6041"}, {"name": "MDVSA-2010:160", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:160"}, {"name": "42575", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/42575"}, {"name": "41041", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/41041"}, {"name": "[oss-security] 20100722 Cacti XSS fixes in 0.8.7g", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://marc.info/?l=oss-security&m=127978954522586&w=2"}, {"name": "RHSA-2010:0635", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://rhn.redhat.com/errata/RHSA-2010-0635.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://cacti.net/release_notes_0_8_7g.php"}, {"name": "[oss-security] 20100726 Re: Cacti XSS fixes in 0.8.7g", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://marc.info/?l=oss-security&m=128017203704299&w=2"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://svn.cacti.net/viewvc?view=rev&revision=6038"}, {"name": "ADV-2010-2132", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2010/2132"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://svn.cacti.net/viewvc?view=rev&revision=6037"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=459229"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://svn.cacti.net/viewvc?view=rev&revision=6042"}, {"name": "cacti-templatesimport-xss(61227)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/61227"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T02:39:37.346Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://svn.cacti.net/viewvc?view=rev&revision=6041"}, {"name": "MDVSA-2010:160", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:160"}, {"name": "42575", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/42575"}, {"name": "41041", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/41041"}, {"name": "[oss-security] 20100722 Cacti XSS fixes in 0.8.7g", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://marc.info/?l=oss-security&m=127978954522586&w=2"}, {"name": "RHSA-2010:0635", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://rhn.redhat.com/errata/RHSA-2010-0635.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://cacti.net/release_notes_0_8_7g.php"}, {"name": "[oss-security] 20100726 Re: Cacti XSS fixes in 0.8.7g", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://marc.info/?l=oss-security&m=128017203704299&w=2"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://svn.cacti.net/viewvc?view=rev&revision=6038"}, {"name": "ADV-2010-2132", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2010/2132"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://svn.cacti.net/viewvc?view=rev&revision=6037"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=459229"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://svn.cacti.net/viewvc?view=rev&revision=6042"}, {"name": "cacti-templatesimport-xss(61227)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/61227"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2010-2545", "datePublished": "2010-08-23T20:00:00", "dateReserved": "2010-06-30T00:00:00", "dateUpdated": "2024-08-07T02:39:37.346Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*", "matchCriteriaId": "12610FA3-8EB9-45F2-9E70-8B3D70E47BC7", "versionEndIncluding": "0.8.7f", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.5:-:*:*:*:*:*:*", "matchCriteriaId": "015D2C09-205B-426B-9118-13CAC82BDF97", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.6:*:*:*:*:*:*:*", "matchCriteriaId": "CF50D0E4-94BC-433F-8986-4E2D9AF61A98", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "8BE433B1-7F0B-4D16-8FD5-A5E193EC983A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "CD541744-A938-44A8-89A5-DE1B39DA1301", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "4D7A1EE2-2C80-46B2-B55A-17D200D722BB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.6.4:*:*:*:*:*:*:*", "matchCriteriaId": "594CCB0C-4DEA-4ECC-93FE-FDAD231F22CD", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.6.5:*:*:*:*:*:*:*", "matchCriteriaId": "21352C22-E89D-482E-A704-1E1EFE0F4959", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.6.6:*:*:*:*:*:*:*", "matchCriteriaId": "51B3887B-078A-459D-AFCF-4BDBDB3B1EF7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.6.7:*:*:*:*:*:*:*", "matchCriteriaId": "B4611FB4-7B8D-4DCA-9BFC-87585E16129B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.6.8:*:*:*:*:*:*:*", "matchCriteriaId": "1740FA47-7129-47C0-9EA8-3D5FE1881AAC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.6.8a:*:*:*:*:*:*:*", "matchCriteriaId": "330C515B-6DD0-4C41-97C8-87689CD443F5", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8:*:*:*:*:*:*:*", "matchCriteriaId": "B44E0187-3577-4770-8D76-10F64F6400B3", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "D3E6282B-B403-45AD-B1EC-82257EEA1A43", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "0936E4B2-D89C-44B3-9082-77FA369BA280", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.2a:*:*:*:*:*:*:*", "matchCriteriaId": "A1257552-9117-45EE-B77C-00879E1FC67B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.3:*:*:*:*:*:*:*", "matchCriteriaId": "BA380DC2-2392-413E-AC7A-F8B854EA3108", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.3a:*:*:*:*:*:*:*", "matchCriteriaId": "B530A944-0A71-4F88-AAE6-3844364FB098", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.4:*:*:*:*:*:*:*", "matchCriteriaId": "62C554AE-AE7A-48B1-A1FF-E8E7691EA344", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.5:*:*:*:*:*:*:*", "matchCriteriaId": "25541421-4A87-43BF-86D7-E1377CE3C859", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.5a:*:*:*:*:*:*:*", "matchCriteriaId": "301E2B13-D410-4B26-9A47-F90343F47C18", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.6:*:*:*:*:*:*:*", "matchCriteriaId": "546CE4D8-1E2E-4DEB-9FA1-DEA05F9AAE9E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.6a:*:*:*:*:*:*:*", "matchCriteriaId": "45C420D9-45EB-40EF-BB9D-BBB5BB7DA6D7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.6b:*:*:*:*:*:*:*", "matchCriteriaId": "D5FE1D7F-5A32-4C66-8B7E-7F790F1D9AAC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.6c:*:*:*:*:*:*:*", "matchCriteriaId": "EE910AB1-7D04-4743-9963-BBA191EE4078", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.6d:*:*:*:*:*:*:*", "matchCriteriaId": "C4290992-9EF9-41D4-8AB5-6744370A25E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.6f:*:*:*:*:*:*:*", "matchCriteriaId": "DB41A3C5-D03A-4B1F-B841-A9F5021A59F0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.6g:*:*:*:*:*:*:*", "matchCriteriaId": "0F794F36-3073-43C5-A6C7-BADBCF6B735E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.6h:*:*:*:*:*:*:*", "matchCriteriaId": "76CB86A0-E3A9-4A43-B98B-46654EFE21A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.6i:*:*:*:*:*:*:*", "matchCriteriaId": "8D62D429-7BDE-47DE-B466-0732DAC3F70E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.6j:*:*:*:*:*:*:*", "matchCriteriaId": "6893355E-2F64-416D-9AED-898E6D1123F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.6k:*:*:*:*:*:*:*", "matchCriteriaId": "9B41942D-A4A9-4916-99E6-DA36EB747BF6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.7:*:*:*:*:*:*:*", "matchCriteriaId": "191A8F3B-EDFA-47AA-B7B1-95B4C05AFD7A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.7a:*:*:*:*:*:*:*", "matchCriteriaId": "7A8C1715-DCA1-4C83-B817-9366172CFC1D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.7b:*:*:*:*:*:*:*", "matchCriteriaId": "307B69DB-CFFB-49BA-A126-134EEE735FCC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.7c:*:*:*:*:*:*:*", "matchCriteriaId": "6532CB60-B8FA-418D-B077-FCC4EE24C1A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.7d:*:*:*:*:*:*:*", "matchCriteriaId": "2B53567F-C65B-4E1F-BBF7-4F55C845A83A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cacti:cacti:0.8.7e:*:*:*:*:*:*:*", "matchCriteriaId": "CB3DC32A-09AF-4DC9-A78E-E951847B76A8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via (1) the name element in an XML template to templates_import.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via vectors related to (2) cdef.php, (3) data_input.php, (4) data_queries.php, (5) data_sources.php, (6) data_templates.php, (7) gprint_presets.php, (8) graph.php, (9) graphs_new.php, (10) graphs.php, (11) graph_templates_inputs.php, (12) graph_templates_items.php, (13) graph_templates.php, (14) graph_view.php, (15) host.php, (16) host_templates.php, (17) lib/functions.php, (18) lib/html_form.php, (19) lib/html_form_template.php, (20) lib/html.php, (21) lib/html_tree.php, (22) lib/rrd.php, (23) rra.php, (24) tree.php, and (25) user_admin.php."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de ejecuci\u00f3n de comandos en sitios crtuzados (XSS) en Cacti antes de v0.8.7g, tal como se utiliza en Red Hat High Performance Computing (HPC) Solution y otros productos, permite a atacantes remotos inyectar HTML o secuencias de comandos web a trav\u00e9s del (1) elemento name en una plantilla XML para templates_import.php. Tambi\u00e9n permite a los administradores remotos autenticados inyectar secuencias de comandos web o HTML a trav\u00e9s de vectores relacionados con (2) cdef.php, (3) data_input.php, (4) data_queries.php, (5) data_sources. php, (6) data_templates.php, (7) gprint_presets.php, (8) graph.php, (9) graphs_new.php, (10) graphs.php, (11) graph_templates_inputs.php, (12) graph_templates_items.php , (13) graph_templates.php, (14) graph_view.php, (15) host.php, (16) host_templates.php, (17) lib/functions.php, (18) lib/html_form.php, (19) lib/html_form_template.php, (20) lib/html.php, (21) lib/html_tree.php, (22) lib/rrd.php, (23) rra.php, (24) tree.php, y (25) user_admin.php."}], "id": "CVE-2010-2545", "lastModified": "2023-02-13T03:17:26.407", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2010-08-23T22:00:03.220", "references": [{"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://cacti.net/release_notes_0_8_7g.php"}, {"source": "secalert@redhat.com", "url": "http://marc.info/?l=oss-security&m=127978954522586&w=2"}, {"source": "secalert@redhat.com", "url": "http://marc.info/?l=oss-security&m=128017203704299&w=2"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/41041"}, {"source": "secalert@redhat.com", "url": "http://svn.cacti.net/viewvc?view=rev&revision=6037"}, {"source": "secalert@redhat.com", "url": "http://svn.cacti.net/viewvc?view=rev&revision=6038"}, {"source": "secalert@redhat.com", "url": "http://svn.cacti.net/viewvc?view=rev&revision=6041"}, {"source": "secalert@redhat.com", "url": "http://svn.cacti.net/viewvc?view=rev&revision=6042"}, {"source": "secalert@redhat.com", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:160"}, {"source": "secalert@redhat.com", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/42575"}, {"source": "secalert@redhat.com", "url": "http://www.vupen.com/english/advisories/2010/2132"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=459229"}, {"source": "secalert@redhat.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/61227"}, {"source": "secalert@redhat.com", "url": "https://rhn.redhat.com/errata/RHSA-2010-0635.html"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "cacti: XSS via various object names or descriptions", "id": "459229", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=459229"}, "csaw": false, "cvss": {"cvss_base_score": "4.0", "cvss_scoring_vector": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "status": "verified"}, "cwe": "CWE-79", "details": ["Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via (1) the name element in an XML template to templates_import.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via vectors related to (2) cdef.php, (3) data_input.php, (4) data_queries.php, (5) data_sources.php, (6) data_templates.php, (7) gprint_presets.php, (8) graph.php, (9) graphs_new.php, (10) graphs.php, (11) graph_templates_inputs.php, (12) graph_templates_items.php, (13) graph_templates.php, (14) graph_view.php, (15) host.php, (16) host_templates.php, (17) lib/functions.php, (18) lib/html_form.php, (19) lib/html_form_template.php, (20) lib/html.php, (21) lib/html_tree.php, (22) lib/rrd.php, (23) rra.php, (24) tree.php, and (25) user_admin.php."], "name": "CVE-2010-2545", "public_date": "2010-07-09T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2010-2545\nhttps://nvd.nist.gov/vuln/detail/CVE-2010-2545"], "threat_severity": "Low"}