Test ID:	1.3.6.1.4.1.25623.1.0.103365
Category:	Web application abuses
Title:	Cacti Multiple Input Validation Vulnerabilities
Summary:	Cacti is prone to multiple multiple input-validation vulnerabilities;including:;;1. Multiple cross-site scripting vulnerabilities.;;2. A cross-site request-forgery vulnerability.;;3. An HTML-injection vulnerability.
Description:	Summary: Cacti is prone to multiple multiple input-validation vulnerabilities including: 1. Multiple cross-site scripting vulnerabilities. 2. A cross-site request-forgery vulnerability. 3. An HTML-injection vulnerability. Vulnerability Impact: An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, disclose or modify sensitive information, or perform unauthorized actions. Other attacks are also possible. Affected Software/OS: Versions prior to Cacti 0.8.7i are vulnerable. Solution: Updates are available. Please see the references for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-5223 BugTraq ID: 51048 http://www.securityfocus.com/bid/51048 http://secunia.com/advisories/47195 XForce ISS Database: cacti-logout-csrf(71792) https://exchange.xforce.ibmcloud.com/vulnerabilities/71792
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.