CVE-2008-0783: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via (1) the viewtype parameter to graph.php; (2) the filter parameter to graphview.php; (3) the action parameter to the drawnavigationtext function in lib/functions.php, reachable through index.php (aka the login page) or datainput.php; or (4) the loginusername parameter to index.php.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0783?
The severity of CVE-2008-0783 is typically rated as high due to its potential for cross-site scripting attacks.
How do I fix CVE-2008-0783?
To fix CVE-2008-0783, upgrade to Cacti version 0.8.7b or later.
What are the affected versions in CVE-2008-0783?
CVE-2008-0783 affects Cacti versions prior to 0.8.7b, including 0.8.7, 0.8.6, and earlier.
Can CVE-2008-0783 be exploited remotely?
Yes, CVE-2008-0783 can be exploited remotely by attackers to inject malicious scripts.
What components are vulnerable in CVE-2008-0783?
The vulnerable components in CVE-2008-0783 include graph.php and graph_view.php, specifically the view_type and filter parameters.