Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

smokeping: cross-site scripting

Package(s): smokeping CVE #(s): CVE-2012-0790

Created: February 1, 2012 Updated: March 21, 2013

Description: The smokeping CGI script does not properly sanitize input passed via the displaymode parameter, thus enabling cross-site scripting attacks.

Alerts:

Fedora	FEDORA-2012-0813	2012-01-31
Fedora	FEDORA-2012-0801	2012-01-31
Debian	DSA-2651-1	2013-03-20

(Log in to post comments)