CVE-2010-1644

Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via the (1) hostname or (2) description parameter to host.php, or (3) the host_id parameter to data_sources.php.

• CWE-79

• http://secunia.com/advisories/41041Vendor Advisory
• http://svn.cacti.net/viewvc?view=rev&revision=5901
• http://www.cacti.net/release_notes_0_8_7f.php
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:160
• http://www.securityfocus.com/archive/1/511393
• http://www.securityfocus.com/bid/40332
• http://www.vupen.com/english/advisories/2010/1203Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2010/2132
• https://bugzilla.redhat.com/show_bug.cgi?id=609093
• https://rhn.redhat.com/errata/RHSA-2010-0635.html
• http://secunia.com/advisories/41041Vendor Advisory
• http://svn.cacti.net/viewvc?view=rev&revision=5901
• http://www.cacti.net/release_notes_0_8_7f.php
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:160
• http://www.securityfocus.com/archive/1/511393
• http://www.securityfocus.com/bid/40332
• http://www.vupen.com/english/advisories/2010/1203Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2010/2132
• https://bugzilla.redhat.com/show_bug.cgi?id=609093
• https://rhn.redhat.com/errata/RHSA-2010-0635.html

Published

Aug 23, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1638The IMP plugin in Horde allows remote attackers to bypass fi…
• CVE-2010-1639The cli_pdf function in libclamav/pdf.c in ClamAV before 0.9…
• CVE-2010-1640Off-by-one error in the parseicon function in libclamav/pe_i…
• CVE-2010-1641The do_gfs2_set_flags function in fs/gfs2/file.c in the Linu…
• CVE-2010-1642The reply_sesssetup_and_X_spnego function in sesssetup.c in …
• CVE-2010-1643mm/shmem.c in the Linux kernel before 2.6.28-rc3, when stric…
• CVE-2010-1645Cacti before 0.8.7f, as used in Red Hat High Performance Com…
• CVE-2010-1646The secure path feature in env.c in sudo 1.3.1 through 1.6.9…
• CVE-2010-1647Cross-site scripting (XSS) vulnerability in MediaWiki 1.15 b…
• CVE-2010-1648Cross-site request forgery (CSRF) vulnerability in the login…
• CVE-2010-1649Multiple cross-site scripting (XSS) vulnerabilities in the b…
• CVE-2010-1650IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.41…