Then edit the map title with the payload: GET editor.php?mapname=test&action=newmap To test it, simply create a map or edit an existing one: Weathermap-cacti-plugin-mgmt.php?action=viewconfig&file= and This application is often used as a plugin for Cacti.
PHP code to a webserver, which can later be executed if the attacker has Listing the files in editor.php?action=newfileīesides the title, other fields also allow an attacker to upload malicious
This title is later shown to the user when The vulnerability happens when a user injects HTML and Javascript into the Other sources are via plugins or external scripts. Support is built in for RRD, MRTG (RRD and old log-format), and Network Weathermap is a network visualisation tool, to take data youĪlready have and show you an overview of your network in map form. Network Weathermap 0.97a is vulnerable to a persistent XSS when displaying Weathermap is widely used by national and international ISPs, tier-1 carriers, internet exchanges, telcos, national academic networks, many Fortune 500 companies in finance, automotive, medical/pharma and other sectors, state and national government departments, schools and universities, and even a church.Change Mirror Download Network Weathermap 0.97a - Persistent XSSĮarlier versions are also possibly vulnerable. Additional datasource plugins allow efficient access to data from Cacti’s poller directly, and data from other Cacti plugins like THold and DSStats. There is strong Cacti integration in particular, leveraging the Cacti plugin architecture to provide a management user interface, and access control for maps using Cacti’s existing user database. It also includes detailed documentation, and an interactive editor to make creating your own maps as painless as possible. Other sources are supported via plugins or external scripts. The RRDtool plugin means you have access to data from a large range of open source monitoring tools, including Cacti, Cricket, Zenoss, MRTG, Routers2, Munin, and many more. Plugins are supplied for RRDtool, MRTG (RRD and old log-format), tab-delimited text files, SNMP, fping, external scripts, and Cacti-specific data. Weathermap is an open source network visualisation tool, to take data you already have and show you an overview of your network activity in map form.ĭata is collected via plugins. Network Weathermap provides Open Source Network Visualisation.Ĭreate your own live network maps from the network statistics you already have.
0 kommentar(er)
