Unrated severityNVD Advisory· Published Jul 11, 2014· Updated Jun 17, 2026

CVE-2014-4907

Description

Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in PNP4Nagios before 0.6.22 allows remote attackers to inject arbitrary web script or HTML via a parameter that is not properly handled in an error message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Patches

Vulnerability mechanics

References

docs.pnp4nagios.org/pnp-0.6/dwnldnvdPatch
sourceforge.net/p/pnp4nagios/code/ci/f846a6c9d007ca2bee05359af747619151195fc9nvdExploitPatch
www.op5.com/blog/news/op5-monitor-6-3-1-release-notesnvdVendor Advisory
openwall.com/lists/oss-security/2014/07/11/3nvd
secunia.com/advisories/59535nvd
secunia.com/advisories/59603nvd
www.securityfocus.com/bid/68350nvd
bugs.op5.com/view.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000