Vulnerability Bulletins

CVE-2011-2904

   
Affected software ZABBIX
 
Cross-site scripting (XSS) vulnerability in acknow.php in Zabbix before 1.8.6 allows remote attackers to inject arbitrary web script or HTML via the backurl parameter.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2011-2904