Информационная безопасность
[RU] switch to English


Дополнительная информация

  Cводка уязвимостей безопасности в Web-приложениях (PHP, ASP, JSP, CGI, Perl)

  Stored and Reflective XSS in Yaws-Wiki 1.88-1 (Erlang)

  HTB22914: Local File Inclusion in UseBB

  HTB22913: Multiple CSRF (Cross-Site Request Forgery) in UseBB

  HTB22912: Multiple SQL Injections in Eleanor CMS

From:Henrik Stoerner <henrik_(at)_hswn.dk>
Date:5 апреля 2011 г.
Subject:Xymon monitor cross-site scripting vulnerabilities

Several cross-site scripting vulnerabilities have been identified in the
Xymon systems- and network-monitoring tool available at
http://sourceforge.net/projects/xymon/

All versions prior to 4.3.1 (released April 3, 2011) are vulnerable.

I would like to thank David Ferrest for notifying me of this issue.


Henrik Størner,
lead Xymon developer.

О сайте | Условия использования
© SecurityVulns, 3APA3A, Владимир Дубровин
Нижний Новгород