QwikSec

Security Database

CVE

CWE

Training

CVE-2013-5695

Published: Nov 5, 2013

Modified: Sep 16, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/auditlog/, (2) PATH_INFO to info/host/ or (3) viewport/, (4) back parameter to login, or (5) "from" parameter to status/service/recheck.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes

x_refsource_CONFIRM

20131028 CVE-2013-5695 Multilple Cross Site Scripting (XSS) Attacks in Ops View

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.