D11611.id30827.diff
No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

D11611.id30827.diff
View Options

	Index: security/vuxml/vuln.xml
	===================================================================
	--- security/vuxml/vuln.xml
	+++ security/vuxml/vuln.xml
	@@ -58,6 +58,35 @@
	* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
	-->
	<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
	+ <vuln vid="dc3c66e8-6a18-11e7-93af-005056925db4">
	+ <topic>Cacti -- Cross-site scripting (XSS) vulnerability in link.php</topic>
	+ <affects>
	+ <package>
	+ <name>cacti</name>
	+ <range><ge>1.0.0</ge><lt>1.1.13</lt></range>
	+ </package>
	+ </affects>
	+ <description>
	+ <body xmlns="http://www.w3.org/1999/xhtml">
	+ <p>kimiizhang reports:</p>
	+ <blockquote cite="https://github.com/Cacti/cacti/issues/838">
	+ <p>Cross-site scripting (XSS) vulnerability in link.php in Cacti<br/>
	+ 1.1.12 allows remote anonymous users to inject arbitrary web<br/>
	+ script or HTML via the id parameter.</p>
	+ </blockquote>
	+ </body>
	+ </description>
	+ <references>
	+ <url>https://github.com/Cacti/cacti/issues/838</url>
	+ <url>https://www.cacti.net/release_notes.php?version=1.1.13</url>
	+ <cvename>CVE-2017-10970</cvename>
	+ </references>
	+ <dates>
	+ <discovery>2017-07-05</discovery>
	+ <entry>2017-07-16</entry>
	+ </dates>
	+ </vuln>
	+
	<vuln vid="457ce015-67fa-11e7-867f-b499baebfeaf">
	<topic>Apache httpd -- multiple vulnerabilities</topic>
	<affects>