cbcvebase.
CVE-2014-4907
published 2014-07-11

CVE-2014-4907: Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in PNP4Nagios before 0.6.22 allows remote attackers to inject…

PriorityP417medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
2.21%
80.4th percentile
Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in PNP4Nagios before 0.6.22 allows remote attackers to inject arbitrary web script or HTML via a parameter that is not properly handled in an error message.

Affected

21 ranges
VendorProductVersion rangeFixed in
op5monitor——
pnp4nagiospnp4nagios<= 0.6.21—
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
pnp4nagiospnp4nagios——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.