Zabbix : Security Vulnerabilities, CVEs, Published In 2011 (XSS)
Cross-site scripting (XSS) vulnerability in ZABBIX before 1.8.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the profiler.
Max CVSS
4.3
EPSS Score
0.28%
Published
2011-12-29
Updated
2012-02-01
Multiple cross-site scripting (XSS) vulnerabilities in Zabbix before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the gname parameter (aka host groups name) to (1) hostgroups.php and (2) usergrps.php, the update action to (3) hosts.php and (4) scripts.php, and (5) maintenance.php.
Max CVSS
4.3
EPSS Score
0.29%
Published
2011-12-29
Updated
2017-08-29
Cross-site scripting (XSS) vulnerability in acknow.php in Zabbix before 1.8.6 allows remote attackers to inject arbitrary web script or HTML via the backurl parameter.
Max CVSS
4.3
EPSS Score
0.37%
Published
2011-08-19
Updated
2017-08-29
3 vulnerabilities found