Multiple cross-site scripting (XSS) vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-5624 and CVE-2008-1360.
- http://sourceforge.net/project/shownotes.php?release_id=600377
- http://sourceforge.net/project/shownotes.php?release_id=600377&group_id=26589
No PoCs found on GitHub currently.