CVE-2011-5027

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in ZABBIX before 1.8.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the profiler.

Weaknesses (CWE)

CWE-79

Affected Products (84)

zabbix · zabbixvulnerable

...and 34 more

References (14)

http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071660.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071687.html

http://osvdb.org/77772

http://secunia.com/advisories/47216

Vendor Advisory

http://www.securityfocus.com/bid/51093

http://www.zabbix.com/rn1.8.10.php

https://support.zabbix.com/browse/ZBX-4015

Vendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071660.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071687.html

http://osvdb.org/77772

http://secunia.com/advisories/47216

Vendor Advisory

http://www.securityfocus.com/bid/51093

http://www.zabbix.com/rn1.8.10.php

https://support.zabbix.com/browse/ZBX-4015

Vendor Advisory