Aller au contenu
Se connecter
Non notée

CVE-2021-26247 As an unauthenticated remote user, visit "http:///auth_changepassword.php?ref=alert(1)" to successfully execute the…

Description

As an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" to successfully execute the JavaScript payload present in the "ref" URL parameter.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cacti 0.8.7g Pas de correctif indiqué

Autres CVE de Cacti

Les 3 CVE de Cacti →
CVE-2021-23225 Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the… Non notée CVE-2021-3816 Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix… Non notée
Suivre cette CVE