CVE:CVE-2007-6465
CNNVD:CNNVD-200712-269
Ganglia中的ganglia-web存在多个跨站脚本攻击漏洞，远程攻击者可以借助对(a) web/host_gmetrics.php的(1) c和(2)h参数；对(b) web/graph.php的(3) G, (4) me, (5) x, (6) n, (7) v, (8) l, (9) vl,和(10) st参数；以及对(c) web/get_context.php的(11) c, (12) G, (13) h, (14) r, (15) m, (16) s, (17) cr, (18) hc, (19) sh, (20) p, (21) t, (22) jr, (23) js, (24) gw, (25) z,和(26) gs参数注入任意web脚本或HTML。
solution:Upgrade ganglia ganglia to a higher version than 3.05,and avoid the version (,3.05]