Xymon monitor cross-site scripting vulnerabilities

From: Henrik Størner <henrik@xxxxxxx>
Date: Sun, 03 Apr 2011 12:15:12 +0200

Several cross-site scripting vulnerabilities have been identified in the Xymon systems- and network-monitoring tool available at http://sourceforge.net/projects/xymon/

All versions prior to 4.3.1 (released April 3, 2011) are vulnerable.

I would like to thank David Ferrest for notifying me of this issue.

Henrik Størner,
lead Xymon developer.

Follow-Ups:
- Re: Xymon monitor cross-site scripting vulnerabilities
  - From: Henri Salo

Prev by Date: THOMSON Router XSS
Next by Date: RealNetworks RealGames StubbyUtil.ProcessMgr.1 ActiveX Control (InstallerDlg.dll v2.6.0.445) Multiple Remote Commands Execution Vulnerabilities
Previous by thread: THOMSON Router XSS
Next by thread: Re: Xymon monitor cross-site scripting vulnerabilities
Index(es):
- Date
- Thread