FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-18 11:12:36 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
f86d0e5d-7467-11e7-93af-005056925db4Cacti -- Cross-site scripting (XSS) vulnerability in auth_profile.php

kimiizhang reports:

Cross-site scripting (XSS) vulnerability in auth_profile.php in Cacti 1.1.13 allows remote authenticated users to inject arbitrary web script or HTML via specially crafted HTTP Referer headers.


Discovery 2017-07-20
Entry 2017-07-29
cacti
eq 1.1.13

https://github.com/Cacti/cacti/issues/867
https://www.cacti.net/release_notes.php?version=1.1.14
CVE-2017-11691