Cross-site scripting (XSS) vulnerability in the nDPI traffic classification library in ntopng (aka ntop) before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.securityfocus.com/archive/1/533332/100/0/threaded | mailing-list x_refsource_BUGTRAQ |
| http://packetstormsecurity.com/files/127995/ntopng-1.2.0-Cross-Site-Scripting.html | x_refsource_MISC |
| http://www.ntop.org/ndpi/released-ndpi-1-5-1-and-ntopng-1-2-1/ | x_refsource_CONFIRM |
| http://seclists.org/fulldisclosure/2014/Sep/28 | mailing-list x_refsource_FULLDISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/95461 | vdb-entry x_refsource_XF |
| http://secunia.com/advisories/60096 | third-party-advisory x_refsource_SECUNIA |
| http://osvdb.org/show/osvdb/110437 | vdb-entry x_refsource_OSVDB |
| http://seclists.org/fulldisclosure/2014/Aug/65 | mailing-list x_refsource_FULLDISC |
| http://seclists.org/fulldisclosure/2014/Sep/22 | mailing-list x_refsource_FULLDISC |
| http://www.exploit-db.com/exploits/34419 | exploit x_refsource_EXPLOIT-DB |
| http://www.securityfocus.com/bid/69385 | vdb-entry x_refsource_BID |
| http://www.securityfocus.com/archive/1/533222/100/0/threaded | mailing-list x_refsource_BUGTRAQ |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|