CVE:CVE-2014-4908
CNNVD:CNNVD-201407-273
PNP4Nagios是一套通过插件获取性能数据分析并将它们自动存储到RRD数据库中的Nagios插件。
PNP4Nagios 0.6.21及之前版本的share/pnp/application/views/kohana_error_page.php脚本和share/pnp/application/views/template.php脚本中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade pnp4nagios pnp4nagios to a higher version than 0.6.21,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.10,0.6.11,0.6.12,0.6.13,0.6.14,0.6.15,0.6.16,0.6.17,0.6.18,0.6.19,0.6.20,and avoid the version (,0.6.21],0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.10,0.6.11,0.6.12,0.6.13,0.6.14,0.6.15,0.6.16,0.6.17,0.6.18,0.6.19,0.6.20