NetSight
IP …
medium4.3Public exploit code

CVE-2008-4320

Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary web script or HTML via (1) the j_userna…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary web script or HTML via (1) the j_username parameter to j_acegi_security_check, (2) the username parameter to notification/list.jsp, and (3) the filter parameter to event/list.

Affected products

VendorProductAffected versions
Opennms.OrgOpennms
through 1.0.0
through 1.1.0
through 1.2.0
through 1.3.0
through 1.5.90
Version 1.1.1

Weakness classification

CWE-79

References