ID de Prueba:	1.3.6.1.4.1.25623.1.0.103365
Categoría:	Web application abuses
Título:	Cacti Multiple Input Validation Vulnerabilities
Resumen:	Cacti is prone to multiple multiple input-validation vulnerabilities;including:;;1. Multiple cross-site scripting vulnerabilities.;;2. A cross-site request-forgery vulnerability.;;3. An HTML-injection vulnerability.
Descripción:	Summary: Cacti is prone to multiple multiple input-validation vulnerabilities including: 1. Multiple cross-site scripting vulnerabilities. 2. A cross-site request-forgery vulnerability. 3. An HTML-injection vulnerability. Vulnerability Impact: An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, disclose or modify sensitive information, or perform unauthorized actions. Other attacks are also possible. Affected Software/OS: Versions prior to Cacti 0.8.7i are vulnerable. Solution: Updates are available. Please see the references for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-5223 BugTraq ID: 51048 http://www.securityfocus.com/bid/51048 http://secunia.com/advisories/47195 XForce ISS Database: cacti-logout-csrf(71792) https://exchange.xforce.ibmcloud.com/vulnerabilities/71792
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.