SSCHADV2011-002 - Cross-Site Scripting vulnerability in Nagios
| Advisory: | Cross-Site Scripting vulnerability in Nagios |
| Advisory ID: | SSCHADV2011-002 |
| Author: | Stefan Schurtz |
| Affected Software: | Successfully tested on: nagios-3.2.0 / nagios-3.2.3 |
| Vendor URL: | http://www.nagios.org |
| Vendor Status: | fixed |
| CVE-ID: | 2011-1523 |
| OSVDB-ID: | 71059 |
======================
Vulnerability Description:
======================
Vulnerability Description:
======================
This is a Cross-Site Scripting vulnerability
JavaScript can be included in style sheets by using "expression()" (IE only)
==============
Technical Details:
==============
Technical Details:
==============
Continue reading "SSCHADV2011-002 - Cross-Site Scripting vulnerability in Nagios"