CVE-2014-4907

https://notcve.org/view.php?id=CVE-2014-4907

11 Jul 2014 — Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in PNP4Nagios before 0.6.22 allows remote attackers to inject arbitrary web script or HTML via a parameter that is not properly handled in an error message. Vulnerabildad de XSS en share/pnp/application/views/kohana_error_page.php en PNP4Nagios anterior a 0.6.22 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un parámetro que no se maneja debidamente en un mensaje de e... • http://docs.pnp4nagios.org/pnp-0.6/dwnld • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •