CVE-2010-2790

Опубликовано: 05 авг. 2010

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in the formatQuery function in frontends/php/include/classes/class.curl.php in Zabbix before 1.8.3rc1 allow remote attackers to inject arbitrary web script or HTML via the (1) filter_set, (2) show_details, (3) filter_rst, or (4) txt_select parameters to the triggers page (tr_status.php). NOTE: some of these details are obtained from third party information.

Ссылки

http://secunia.com/advisories/40679
Vendor Advisory
http://www.securityfocus.com/bid/42017
http://www.vupen.com/english/advisories/2010/1908
Patch
Vendor Advisory
http://www.zabbix.com/forum/showthread.php?p=68770
https://exchange.xforce.ibmcloud.com/vulnerabilities/60772
https://support.zabbix.com/browse/ZBX-2326
Vendor Advisory
http://secunia.com/advisories/40679
Vendor Advisory
http://www.securityfocus.com/bid/42017
http://www.vupen.com/english/advisories/2010/1908
Patch
Vendor Advisory
http://www.zabbix.com/forum/showthread.php?p=68770
https://exchange.xforce.ibmcloud.com/vulnerabilities/60772
https://support.zabbix.com/browse/ZBX-2326
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*

Версия до 1.8.2 (включая)

cpe:2.3:a:zabbix:zabbix:1.1:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1:beta10:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1:beta11:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1:beta12:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1:beta2:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1:beta3:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1:beta4:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1:beta5:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1:beta6:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1:beta7:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1:beta8:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1:beta9:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1.6:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.3:beta:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.3.1:beta:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.3.2:beta:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.3.3:beta:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.3.4:beta:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.3.5:beta:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.3.6:beta:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.3.7:beta:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.3.8:beta:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.4.4:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.4.5:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.4.6:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.5:beta:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.5.1:beta:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.5.2:beta:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.5.3:beta:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.5.4:beta:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.6:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.6.1:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.6.2:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.6.3:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.6.4:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.6.5:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.6.6:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.6.7:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.6.8:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.6.9:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.7:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.7.1:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.7.2:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.7.3:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.7.4:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.8:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:1.8.1:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00442

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2010-2790

ubuntu

больше 15 лет назад

CVE-2010-2790

debian

больше 15 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in the formatQuery ...

GHSA-6f9x-gc6q-v2cg

github

больше 3 лет назад

EPSS

Процентиль: 63%

0.00442

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79