CVE-2011-2179

Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an (a) command action or a (b) hosts action.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

26.04% chance of exploitation in the next 30 days, 98th percentile

Published

2011-06-14

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/35818

References

• CVE Record
• NVD entry

Related

• CVE-2011-2174
• CVE-2011-2183
• CVE-2011-2165
• CVE-2011-2189
• CVE-2011-2140
• CVE-2011-2194