CVE-2011-4615: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Zabbix before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the gname parameter (aka host groups name) to (1) hostgroups.php and (2) usergrps.php, the update action to (3) hosts.php and (4) scripts.php, and (5) maintenance.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4615?
CVE-2011-4615 is classified as a medium vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2011-4615?
To fix CVE-2011-4615, upgrade Zabbix to version 1.8.10 or later, which addresses the identified vulnerabilities.
What versions of Zabbix are affected by CVE-2011-4615?
CVE-2011-4615 affects Zabbix versions prior to 1.8.10 including several versions from 1.1 to 1.8.9.
What changes were made to resolve CVE-2011-4615?
Updates made to resolve CVE-2011-4615 included input validation and escaping for the affected parameters to prevent XSS.
Can CVE-2011-4615 be exploited remotely?
Yes, CVE-2011-4615 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.