CVE-2014-4907

Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in PNP4Nagios before 0.6.22 allows remote attackers to inject arbitrary web script or HTML via a parameter that is not properly handled in an error message.

Published: Jul 11, 2014
Updated: Apr 13, 2023
CVE: CVE-2014-4907
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
op5 / monitor	6.3.0	6.3.0.x
pnp4nagios / pnp4nagios	0.6.2	0.6.2.x
pnp4nagios / pnp4nagios	0.6.3	0.6.3.x
pnp4nagios / pnp4nagios	0.6.5	0.6.5.x
pnp4nagios / pnp4nagios	0.6.1	0.6.1.x
pnp4nagios / pnp4nagios	0.6.12	0.6.12.x
pnp4nagios / pnp4nagios	0.6.17	0.6.17.x
pnp4nagios / pnp4nagios	0.6.11	0.6.11.x
pnp4nagios / pnp4nagios	-	0.6.21.x
pnp4nagios / pnp4nagios	0.6.7	0.6.7.x
pnp4nagios / pnp4nagios	0.6.19	0.6.19.x
pnp4nagios / pnp4nagios	0.6.10	0.6.10.x
pnp4nagios / pnp4nagios	0.6.6	0.6.6.x
pnp4nagios / pnp4nagios	0.6.4	0.6.4.x
pnp4nagios / pnp4nagios	0.6.0	0.6.0.x
pnp4nagios / pnp4nagios	0.6.14	0.6.14.x
pnp4nagios / pnp4nagios	0.6.20	0.6.20.x
pnp4nagios / pnp4nagios	0.6.13	0.6.13.x
pnp4nagios / pnp4nagios	0.6.18	0.6.18.x
pnp4nagios / pnp4nagios	0.6.16	0.6.16.x
pnp4nagios / pnp4nagios	0.6.15	0.6.15.x

Vulnerability Database

289,784

CVE-2014-4907