CVEvulnerability
CVE-2014-5464
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-09-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the nDPI traffic classification library in ntopng (aka ntop) before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header.
Affected configurations
• ntop ntopng (<= 1.2.0)
• ntop ntopng 1.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/show/osvdb/110437 osvdb.org
- http://packetstormsecurity.com/files/127995/ntopng-1.2.0-Cross-Site-Scripting.html Exploit
- http://seclists.org/fulldisclosure/2014/Aug/65 Exploit
- http://seclists.org/fulldisclosure/2014/Sep/22 Exploit
- http://seclists.org/fulldisclosure/2014/Sep/28 Exploit
- http://secunia.com/advisories/60096 secunia.com
- http://www.exploit-db.com/exploits/34419 Exploit
- http://www.ntop.org/ndpi/released-ndpi-1-5-1-and-ntopng-1-2-1/ www.ntop.org
- http://www.securityfocus.com/archive/1/533222/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/533332/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/69385 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95461 exchange.xforce.ibmcloud.com
- http://osvdb.org/show/osvdb/110437 osvdb.org
- http://packetstormsecurity.com/files/127995/ntopng-1.2.0-Cross-Site-Scripting.html Exploit
- http://seclists.org/fulldisclosure/2014/Aug/65 Exploit
- http://seclists.org/fulldisclosure/2014/Sep/22 Exploit
- http://seclists.org/fulldisclosure/2014/Sep/28 Exploit
- http://secunia.com/advisories/60096 secunia.com
- http://www.exploit-db.com/exploits/34419 Exploit
- http://www.ntop.org/ndpi/released-ndpi-1-5-1-and-ntopng-1-2-1/ www.ntop.org
- http://www.securityfocus.com/archive/1/533222/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/533332/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/69385 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95461 exchange.xforce.ibmcloud.com