CVE-2014-4908

Published: Jul 11, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in PNP4Nagios through 0.6.22 allow remote attackers to inject arbitrary web script or HTML via the URI used for reaching (1) share/pnp/application/views/kohana_error_page.php or (2) share/pnp/application/views/template.php, leading to improper handling within an http-equiv="refresh" META element.

Affected (20)

Products: Pnp4nagios: Pnp4nagios

Pnp4nagios

1 product

Pnp4nagios

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Pnp4nagios Pnp4nagios	Up to 0.6.21
Pnp4nagios Pnp4nagios	Version 0.6.0
Pnp4nagios Pnp4nagios	Version 0.6.10
Pnp4nagios Pnp4nagios	Version 0.6.11
Pnp4nagios Pnp4nagios	Version 0.6.12
Pnp4nagios Pnp4nagios	Version 0.6.13
Pnp4nagios Pnp4nagios	Version 0.6.14
Pnp4nagios Pnp4nagios	Version 0.6.15
Pnp4nagios Pnp4nagios	Version 0.6.16
Pnp4nagios Pnp4nagios	Version 0.6.17
Pnp4nagios Pnp4nagios	Version 0.6.18
Pnp4nagios Pnp4nagios	Version 0.6.19
Pnp4nagios Pnp4nagios	Version 0.6.1
Pnp4nagios Pnp4nagios	Version 0.6.20
Pnp4nagios Pnp4nagios	Version 0.6.2
Pnp4nagios Pnp4nagios	Version 0.6.3
Pnp4nagios Pnp4nagios	Version 0.6.4
Pnp4nagios Pnp4nagios	Version 0.6.5
Pnp4nagios Pnp4nagios	Version 0.6.6
Pnp4nagios Pnp4nagios	Version 0.6.7