Medium severity6.1NVD Advisory· Published Jul 17, 2017· Updated Jun 17, 2026
CVE-2017-1000032
CVE-2017-1000032
Description
Cross-Site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web script or HTML via the parent_id parameter to tree.php and drp_action parameter to data_sources.php.
Affected products
2cpe:2.3:a:cacti:cacti:0.8.8b:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cacti:cacti:0.8.8b:*:*:*:*:*:*:*
- (no CPE)range: <=0.8.8b
Patches
Vulnerability mechanics
References
1- www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-007/nvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.