CVE-2010-2543
Last modified
CVE-2010-2543 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in include/top_graph_header.php in Cacti before 0.8.7g allows remote attackers to inject arbitrary web script or HTML via the graph_start parameter to graph.php. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-4032.2.b.. EPSS estimates a 3.87% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in include/top_graph_header.php in Cacti before 0.8.7g allows remote attackers to inject arbitrary web script or HTML via the graph_start parameter to graph.php. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-4032.2.b.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cacti | Cacti | <= 0.8.7f |
| Cacti | Cacti | 0.5 |
| Cacti | Cacti | 0.6 |
| Cacti | Cacti | 0.6.1 |
| Cacti | Cacti | 0.6.2 |
| Cacti | Cacti | 0.6.3 |
| Cacti | Cacti | 0.6.4 |
| Cacti | Cacti | 0.6.5 |
| Cacti | Cacti | 0.6.6 |
| Cacti | Cacti | 0.6.7 |
| Cacti | Cacti | 0.6.8 |
| Cacti | Cacti | 0.6.8a |
| Cacti | Cacti | 0.8 |
| Cacti | Cacti | 0.8.1 |
| Cacti | Cacti | 0.8.2 |
| Cacti | Cacti | 0.8.2a |
| Cacti | Cacti | 0.8.3 |
| Cacti | Cacti | 0.8.3a |
| Cacti | Cacti | 0.8.4 |
| Cacti | Cacti | 0.8.5 |
| Cacti | Cacti | 0.8.5a |
| Cacti | Cacti | 0.8.6 |
| Cacti | Cacti | 0.8.6a |
| Cacti | Cacti | 0.8.6b |
| Cacti | Cacti | 0.8.6c |
| Cacti | Cacti | 0.8.6d |
| Cacti | Cacti | 0.8.6f |
| Cacti | Cacti | 0.8.6g |
| Cacti | Cacti | 0.8.6h |
| Cacti | Cacti | 0.8.6i |
| Cacti | Cacti | 0.8.6j |
| Cacti | Cacti | 0.8.6k |
| Cacti | Cacti | 0.8.7 |
| Cacti | Cacti | 0.8.7a |
| Cacti | Cacti | 0.8.7b |
| Cacti | Cacti | 0.8.7c |
| Cacti | Cacti | 0.8.7d |
| Cacti | Cacti | 0.8.7e |
References
- http://cacti.net/release_notes_0_8_7g.phpVendor Advisory
- http://cacti.net/release_notes_0_8_7g.phpVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-2543?
How severe is CVE-2010-2543?
How do I fix CVE-2010-2543?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-2537The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Li…7.1
- CVE-2010-2538Integer overflow in the btrfs_ioctl_clone function in fs/btr…5.5
- CVE-2010-2539Buffer overflow in the msTmpFile function in maputil.c in ma…
- CVE-2010-2540mapserv.c in mapserv in MapServer before 4.10.6 and 5.x befo…
- CVE-2010-2541Buffer overflow in ftmulti.c in the ftmulti demo program in …
- CVE-2010-2542Stack-based buffer overflow in the is_git_directory function…
- CVE-2010-2544Cross-site scripting (XSS) vulnerability in utilities.php in…
- CVE-2010-2545Multiple cross-site scripting (XSS) vulnerabilities in Cacti…
- CVE-2010-2546Multiple heap-based buffer overflows in loaders/load_it.c in…
- CVE-2010-2547Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM i…8.1
- CVE-2010-2548IcedTea6 before 1.7.4 does not properly check property acces…9.1
- CVE-2010-2549Use-after-free vulnerability in the kernel-mode drivers in M…
Are you affected by CVE-2010-2543?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST