ByteOS Network

NVD Vulnerability Details :

CVE-2007-6465

Modified

Source-cve@mitre.org

Published At-20 Dec, 2007 | 00:46

Updated At-08 Mar, 2011 | 03:02

Multiple cross-site scripting (XSS) vulnerabilities in ganglia-web in Ganglia before 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) c and (2) h parameters to (a) web/host_gmetrics.php; the (3) G, (4) me, (5) x, (6) n, (7) v, (8) l, (9) vl, and (10) st parameters to (b) web/graph.php; and the (11) c, (12) G, (13) h, (14) r, (15) m, (16) s, (17) cr, (18) hc, (19) sh, (20) p, (21) t, (22) jr, (23) js, (24) gw, (25) z, and (26) gs parameters to (c) web/get_context.php. NOTE: some of these details are obtained from third party information.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

ganglia>>ganglia>>Versions up to 3.05(inclusive)

cpe:2.3:a:ganglia:ganglia:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/28116	cve@mitre.org	Patch Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=562168	cve@mitre.org	Patch
http://www.osvdb.org/39515	cve@mitre.org	N/A
http://www.osvdb.org/39516	cve@mitre.org	N/A
http://www.osvdb.org/39517	cve@mitre.org	N/A
http://www.securityfocus.com/bid/26895	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2007/4250	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History