CVE-2013-5588: XSS
Published Aug 29, 2013
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the step parameter to install/index.php or (2) the id parameter to cacti/host.php.
Affected Software
37 affected componentsFixes available
Cacti Cacti<=0.8.8b
Cacti Cacti=0.8
Cacti Cacti=0.8.1
Cacti Cacti=0.8.2
Cacti Cacti=0.8.2a
Cacti Cacti=0.8.3
Cacti Cacti=0.8.3a
Cacti Cacti=0.8.4
Cacti Cacti=0.8.5
Cacti Cacti=0.8.5a
Cacti Cacti=0.8.6
Cacti Cacti=0.8.6a
Cacti Cacti=0.8.6b
Cacti Cacti=0.8.6c
Cacti Cacti=0.8.6d
Cacti Cacti=0.8.6e
Cacti Cacti=0.8.6f
Cacti Cacti=0.8.6g
Cacti Cacti=0.8.6h
Cacti Cacti=0.8.6i
Cacti Cacti=0.8.6j
Cacti Cacti=0.8.6k
Cacti Cacti=0.8.7
Cacti Cacti=0.8.7a
Cacti Cacti=0.8.7b
Cacti Cacti=0.8.7c
Cacti Cacti=0.8.7d
Cacti Cacti=0.8.7e
Cacti Cacti=0.8.7f
Cacti Cacti=0.8.7g
Cacti Cacti=0.8.7h
Cacti Cacti=0.8.7i
Cacti Cacti=0.8.8
Cacti Cacti=0.8.8a
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
debian/cacti
1.2.16+ds1-2+deb11u31.2.16+ds1-2+deb11u51.2.24+ds1-1+deb12u51.2.30+ds1-1
Remediation
Patch Available
Event History
Aug 29, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5588?
CVE-2013-5588 is considered a medium severity vulnerability due to its ability to allow cross-site scripting attacks.
2
How do I fix CVE-2013-5588?
To mitigate CVE-2013-5588, upgrade to Cacti version 1.2.16+ds1-2+deb11u3 or later.
3
What versions of Cacti are affected by CVE-2013-5588?
CVE-2013-5588 affects Cacti versions 0.8.8b and earlier.
4
What types of attacks can be executed with CVE-2013-5588?
CVE-2013-5588 allows remote attackers to inject arbitrary web scripts or HTML, facilitating cross-site scripting attacks.
5
What are the parameters involved in exploiting CVE-2013-5588?
The vulnerability can be exploited using the 'step' parameter in install/index.php and the 'id' parameter in cacti/host.php.