CVE-2013-6395

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject arbitrary web script or HTML via the host_regex parameter to the default URI, which is processed by get_context.php.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730507Exploit, Patch
http://osvdb.org/100380
http://seclists.org/oss-sec/2013/q4/346Exploit, Patch
http://secunia.com/advisories/55854Vendor Advisory
http://www.rusty-ice.de/advisory/advisory_2013002.txtExploit, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/89272
https://github.com/ganglia/ganglia-web/issues/218Exploit, Patch
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730507Exploit, Patch
http://osvdb.org/100380
http://seclists.org/oss-sec/2013/q4/346Exploit, Patch
http://secunia.com/advisories/55854Vendor Advisory
http://www.rusty-ice.de/advisory/advisory_2013002.txtExploit, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/89272
https://github.com/ganglia/ganglia-web/issues/218Exploit, Patch

Timeline

Published: Dec 5, 2013
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-63965.8The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, wh CVE-2013-63974.3Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (CVE-2013-63982.8The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, whic CVE-2013-63997.5Array index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code v CVE-2013-64006.8Xen 4.2.x and 4.3.x, when using Intel VT-d and a PCI device has been assigned, does not clear the flag that suppresses IOMMU TLB flushes whe CVE-2013-64015.0Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent atta CVE-2013-64022.1base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack o CVE-2013-64036.8The admin page in ownCloud before 5.0.13 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to CVE-2013-64044.0Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows rem CVE-2013-64076.4The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an CVE-2013-64086.4The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers CVE-2013-64096.2Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via