CVE-2017-12066

Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti before 1.1.16 allows remote authenticated users to inject arbitrary web script or HTML via specially crafted HTTP Referer headers, related to the $cancel_url variable. NOTE: this vulnerability exists because of an incomplete fix (lack of the htmlspecialchars ENT_QUOTES flag) for CVE-2017-11163.

• CWE-79

• https://cacti.net/release_notes.php?version=1.1.16Release Notes, Vendor Advisory
• https://github.com/Cacti/cacti/commit/bd0e586f6f46d814930226f1516a194e7e72293eIssue Tracking, Patch, Third Party Advisory
• https://github.com/Cacti/cacti/issues/877Issue Tracking, Patch, Third Party Advisory
• https://cacti.net/release_notes.php?version=1.1.16Release Notes, Vendor Advisory
• https://github.com/Cacti/cacti/commit/bd0e586f6f46d814930226f1516a194e7e72293eIssue Tracking, Patch, Third Party Advisory
• https://github.com/Cacti/cacti/issues/877Issue Tracking, Patch, Third Party Advisory

Published

Aug 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1204IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 contains…
• CVE-2017-1205IBM Platform LSF 10.1 contains an unspecified vulnerability …
• CVE-2017-12061An XSS issue was discovered in admin/install.php in MantisBT…6.1
• CVE-2017-12062An XSS issue was discovered in manage_user_page.php in Manti…
• CVE-2017-12064The csv_log_html function in library/edihistory/edih_csv_inc…
• CVE-2017-12065spikekill.php in Cacti before 1.1.16 might allow remote atta…
• CVE-2017-12067Potrace 1.14 has a heap-based buffer over-read in the interp…
• CVE-2017-12068The Event List plugin 0.7.9 for WordPress has XSS in the slu…
• CVE-2017-12069An XXE vulnerability has been identified in OPC Foundation U…
• CVE-2017-1207IBM WebSphere Message Broker stores user credentials in plai…
• CVE-2017-12070Unsigned versions of the DLLs distributed by the OPC Foundat…
• CVE-2017-12071Server-side request forgery (SSRF) vulnerability in file_upl…