VDB

DEBIAN-CVE-2010-1644

DEBIAN-CVE-2010-1644 PUBLISHED CVSS 9.300000190734863 CRITICAL

Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via the (1) hostname or (2) description parameter to host.php, or (3) the host_id parameter to data_sources.php.

Risk Scores

CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
Debian:13cacti0, 0, 0
Debian:12cacti0, 0, 0
Debian:11cacti0, 0, 0
Debian:14cacti0

Timeline

  • Aug 23, 2010 CVE Published
  • May 10, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›