XSS in Pandorafms Pandora Flexible Monitoring System
CVE-2014-8629
Cross-site scripting (XSS) vulnerability in the Page visualization agents in Pandora FMS 5.1 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via the refr parameter to index.php.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.019 (77.4th percentile) — read the EPSS interpretation.
Affected products
- Pandorafms Pandora_flexible_monitoring_system
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM, Patch)