CVE-2011-5027

Zabbix < 1.8.10 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in ZABBIX before 1.8.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the profiler.

References (7)

[Vendor Advisory] http://secunia.com/advisories/47216

[Various Sources] http://www.zabbix.com/rn1.8.10.php

[Vendor Advisory] https://support.zabbix.com/browse/ZBX-4015

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/51093

[Mailing List, Third Party Advisory] http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071660.html

[Mailing List, Third Party Advisory] http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071687.html

[Third Party Advisory, VDB Entry] http://osvdb.org/77772

Scores

EPSS 0.0044

EPSS Percentile 63.0%

Classification

CWE

CWE-79

Status published

Affected Products (50)

zabbix/zabbix

zabbix/zabbix < 1.8.10

zabbix/zabbix

... and 35 more

Timeline

Published Dec 29, 2011

Tracked Since Feb 18, 2026