{"id":"CVE-2009-4032","aliases":["DEBIAN-CVE-2009-4032","DSA-1954-1","EUVD-2009-4003","GHSA-2chx-2wx9-x7f6","RHSA-2010:0635"],"status":"published","title":"Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to...","description":"Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.php, and (4) lib/timespan_settings.php, as demonstrated by the (a) graph_end or (b) graph_start parameters to graph.php; (c) the date1 parameter in a tree action to graph_view.php; and the (d) page_refresh and (e) default_dual_pane_width parameters to graph_settings.php.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05739,"percentile":0.93106,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-79"],"published":"2009-11-27T19:00:00Z","modified":"2026-10-23T17:47:28Z","exploits":[{"source":"exploitdb","id":"EDB-33374","title":"Cacti 0.8.x - 'graph.php' Multiple Cross-Site Scripting Vulnerabilities","type":"webapps","platform":"php","date":"2009-11-21","verified":true,"url":"https://www.exploit-db.com/exploits/33374"},{"source":"exploitdb","id":"EDB-10234","title":"Cacti 0.8.7e - Multiple Vulnerabilities","type":"webapps","platform":"php","date":"2009-11-26","verified":true,"url":"https://www.exploit-db.com/exploits/10234"}],"fixes":[{"ecosystem":"Debian:12","package":"cacti","fixed_in":["0.8.7e-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cacti","fixed_in":["0.8.7e-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cacti","fixed_in":["0.8.7e-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7e-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7e-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7e-1.1"}]}]},{"source":"osv","ecosystem":"Debian:4.0","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.6i-3.6"}]}],"versions":["0.8.6i-3","0.8.6i-3.2","0.8.6i-3.3","0.8.6i-3.4","0.8.6i-3.5"],"bundled":3},{"source":"osv","ecosystem":"Debian:5.0","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7b-2.1+lenny1"}]}],"versions":["0.8.7b-2.1"],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"GeoIP","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.7-0.1.20090931cvs.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"GeoIP-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.7-0.1.20090931cvs.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"GeoIP-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.7-0.1.20090931cvs.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"blacs-mvapich1-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20000224-7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"blacs-mvapich1-gnu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20000224-7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"blacs-openmpi-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20000224-9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"blacs-openmpi-gnu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20000224-9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7g-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-RHEL-OFED","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-RHEL-OFED-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-base-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-base-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1-49"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-ganglia-agent-v3_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0-3.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-ganglia-server-v3_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0-3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-gnome-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-icr-facilitator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-lava-compute-v1_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-mvapich1-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1-4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-nagios-installer-v2_12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-ntop-v3_3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3-12"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"environment-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.7b-7.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"environment-modules-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.7b-7.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"initrd-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"iozone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3-5.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"iozone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3-5.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-47"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-ganglia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0-8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1-5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-lava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-11"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-nagios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-ntop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3-13"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-rhel-ofed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-rhel_java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0-3.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-appglobals-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-autoinstall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-base-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-base-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-base-node-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-buildkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-driverpatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-hardware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-kitops","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-md5crypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-net-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-networktool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-nodeinstaller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-nodeinstaller-patchfiles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-path","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-release","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-repoman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"lava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"lava-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"lava-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"lava-master-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"lava-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"linpack-mvapich1-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0a-7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"linpack-openmpi-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0a-6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-apt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-breeze","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-by_ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-dig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-disk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-disk_smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-dummy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-file_age","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-flexlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-fping","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-hpjd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-icmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ide_smart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ifoperstatus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ifstatus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ircd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-linux_raid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-load","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-log","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-mailq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-mrtg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-mrtgtraf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-nagios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-nrpe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-12.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-nt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-nwstat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-overcr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ping","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-procs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-radius","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-real","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-rpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-sensors","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-swap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-tcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-time","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-udp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-users","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-wave","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"netcdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.2-7.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"netcdf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.2-7.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"netcdf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.2-7.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nrpe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-12.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nrpe-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-12.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"ntop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.9-7.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"ntop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.9-7.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"pcm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"pcm-kit-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"pcm-kit-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-22"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"pcm-kit-ntop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"platform_mvapich","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-0.3635.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"primitive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"python-IPy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.70-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"python-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"python-psycopg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"python-psycopg2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"python-psycopg2-zope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"scalapack-mvapich1-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"scalapack-mvapich1-gnu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"scalapack-openmpi-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"scalapack-openmpi-gnu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-9"}]}],"bundled":7}],"products":[{"vendor":"cacti","product":"cacti"}],"references":[{"url":"http://www.cacti.net/download_patches.php","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/archive/1/508129/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0292.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","web"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01390.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://secunia.com/advisories/38087","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://jvn.jp/en/jp/JVN09758120/index.html","tags":["third-party-advisory","x_refsource_JVN","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54388","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://secunia.com/advisories/41041","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003901.html","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred","web"]},{"url":"http://docs.cacti.net/#cross-site_scripting_fixes","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0635.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/25/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/30/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://secunia.com/advisories/37481","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/25/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/26/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/37109","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch","fix"]},{"url":"http://www.vupen.com/english/advisories/2009/3325","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.vupen.com/english/advisories/2010/2132","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/37934","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.osvdb.org/60483","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=294573","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00166.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.cacti.net/downloads/patches/0.8.7e/cross_site_fix.patch","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-4032","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0635","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-4032","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=541279","tags":["report"]},{"url":"https://github.com/advisories/GHSA-2chx-2wx9-x7f6"},{"url":"https://security-tracker.debian.org/tracker/CVE-2009-4032","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459229","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=585401","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=599419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=609076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=609093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=609115","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0635.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-4032","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1431","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1431","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1431","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1644","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1645","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2092","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2092","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2092","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2544","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2544","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2544","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2545","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2545","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2545","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2009-4032","description":"Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.php, and (4) lib/timespan_settings.php, as demonstrated by the (a) graph_end or (b) graph_start parameters to graph.php; (c) the date1 parameter in a tree action to graph_view.php; and the (d) page_refresh and (e) default_dual_pane_width parameters to graph_settings.php.","status":"published","published":"2009-11-27T19:00:00Z","modified":"2024-08-07T06:45:50.905Z","updated_at":"2026-11-02T14:33:24.451733Z"}],"euvd":[{"id":"EUVD-2009-4003","description":"Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.php, and (4) lib/timespan_settings.php, as demonstrated by the (a) graph_end or (b) graph_start parameters to graph.php; (c) the date1 parameter in a tree action to graph_view.php; and the (d) page_refresh and (e) default_dual_pane_width parameters to graph_settings.php.","status":"published","published":"2009-11-27T19:00:00Z","modified":"2024-08-07T06:45:50Z","updated_at":"2026-11-03T01:39:11.734855Z"}],"ghsa":[{"id":"GHSA-2chx-2wx9-x7f6","title":"Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to...","description":"Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.php, and (4) lib/timespan_settings.php, as demonstrated by the (a) graph_end or (b) graph_start parameters to graph.php; (c) the date1 parameter in a tree action to graph_view.php; and the (d) page_refresh and (e) default_dual_pane_width parameters to graph_settings.php.","status":"published","published":"2022-05-02T03:50:58Z","modified":"2023-02-10T05:06:35Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:54:02.310741Z"}],"nvd":[{"id":"CVE-2009-4032","description":"Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.php, and (4) lib/timespan_settings.php, as demonstrated by the (a) graph_end or (b) graph_start parameters to graph.php; (c) the date1 parameter in a tree action to graph_view.php; and the (d) page_refresh and (e) default_dual_pane_width parameters to graph_settings.php.","status":"published","published":"2009-11-29T13:07:34.017Z","modified":"2026-06-16T23:12:52.5Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:01:37.939838Z"}],"osv":[{"id":"CVE-2009-4032","description":"Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.php, and (4) lib/timespan_settings.php, as demonstrated by the (a) graph_end or (b) graph_start parameters to graph.php; (c) the date1 parameter in a tree action to graph_view.php; and the (d) page_refresh and (e) default_dual_pane_width parameters to graph_settings.php.","status":"published","published":"2009-11-29T13:07:34Z","modified":"2026-04-10T03:41:00.485302Z","updated_at":"2026-11-02T15:43:57.714116Z"},{"id":"DEBIAN-CVE-2009-4032","description":"Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.php, and (4) lib/timespan_settings.php, as demonstrated by the (a) graph_end or (b) graph_start parameters to graph.php; (c) the date1 parameter in a tree action to graph_view.php; and the (d) page_refresh and (e) default_dual_pane_width parameters to graph_settings.php.","status":"published","published":"2009-11-29T13:07:34.017Z","modified":"2026-10-23T17:47:28.547477521Z","updated_at":"2026-11-02T15:45:24.013654Z"},{"id":"DSA-1954-1","title":"cacti - insufficient input sanitising","status":"published","published":"2009-12-16T00:00:00Z","modified":"2026-03-09T01:20:29.342567Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"RHSA-2010:0635","title":"Red Hat Security Advisory: Red Hat High Performance Computing (HPC) Solution 5.5","status":"published","published":"2024-09-15T18:27:16Z","modified":"2026-01-29T10:56:47.721948Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}