CVE-2013-5588
Published Aug 29, 2013
Last updated 6 years ago
Overview
- Description
- Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the step parameter to install/index.php or (2) the id parameter to cacti/host.php.
- Source
- security@debian.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAAF93EB-D502-4210-AD60-A01FE14F077E",
"versionEndIncluding": "0.8.8b"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B44E0187-3577-4770-8D76-10F64F6400B3"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3E6282B-B403-45AD-B1EC-82257EEA1A43"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0936E4B2-D89C-44B3-9082-77FA369BA280"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.2a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1257552-9117-45EE-B77C-00879E1FC67B"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA380DC2-2392-413E-AC7A-F8B854EA3108"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.3a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B530A944-0A71-4F88-AAE6-3844364FB098"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62C554AE-AE7A-48B1-A1FF-E8E7691EA344"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25541421-4A87-43BF-86D7-E1377CE3C859"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.5a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "301E2B13-D410-4B26-9A47-F90343F47C18"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "546CE4D8-1E2E-4DEB-9FA1-DEA05F9AAE9E"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.6a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45C420D9-45EB-40EF-BB9D-BBB5BB7DA6D7"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.6b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5FE1D7F-5A32-4C66-8B7E-7F790F1D9AAC"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.6c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE910AB1-7D04-4743-9963-BBA191EE4078"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.6d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4290992-9EF9-41D4-8AB5-6744370A25E5"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.6e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E239B64D-6B94-4E77-8245-5293247F09D4"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.6f:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB41A3C5-D03A-4B1F-B841-A9F5021A59F0"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.6g:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F794F36-3073-43C5-A6C7-BADBCF6B735E"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.6h:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76CB86A0-E3A9-4A43-B98B-46654EFE21A7"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.6i:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D62D429-7BDE-47DE-B466-0732DAC3F70E"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.6j:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6893355E-2F64-416D-9AED-898E6D1123F8"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.6k:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B41942D-A4A9-4916-99E6-DA36EB747BF6"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "191A8F3B-EDFA-47AA-B7B1-95B4C05AFD7A"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.7a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A8C1715-DCA1-4C83-B817-9366172CFC1D"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.7b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "307B69DB-CFFB-49BA-A126-134EEE735FCC"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.7c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6532CB60-B8FA-418D-B077-FCC4EE24C1A9"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.7d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B53567F-C65B-4E1F-BBF7-4F55C845A83A"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.7e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB3DC32A-09AF-4DC9-A78E-E951847B76A8"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.7f:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6537BC21-D7C5-4EEB-BE7A-D1C9A27E290D"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.7g:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9C0E835-9CB2-4700-8216-EC2F1BCB4CB6"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.7h:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E0D40E1-6A0F-4AE7-97A5-D2230BBF4FF4"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.7i:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FC44FEA-FB88-4620-B200-E188C7A2BFAA"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5DABFA50-3C45-4841-945B-FBC40B9C94B7"
},
{
"criteria": "cpe:2.3:a:cacti:cacti:0.8.8a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACD91588-5963-4CDE-8C51-B2B4C75C1628"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F"
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03117DF1-3BEC-4B8D-AD63-DBBDB2126081"
}
],
"operator": "OR"
}
]
}
]