Andermat8

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.1.37 Description: The issue arises from the get current page function in lib/functions.php, which relies on $ SERVER['PHP SELF'] instead of $ SERVER['SCRIPT NAME'] to determine a page name, leading to a cross-site scripting (XSS) issue. Recommendations: For versions prior to 1.1.37, update to version 1.1.37 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.1.37 Description: The issue arises from the software's failure to properly reject unintended characters, which is related to the use of the `sanitize uri` function in `lib/functions.php`. This can lead to a cross-site scripting (XSS) attack. Recommendations: For versions prior to 1.1.37, update to version 1.1.37 or later to resolve the issue. As a temporary workaround, consider restricting access to the `sanitize uri` function in `lib/functions.php` until a patch is available.

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.1.37 Description: The issue arises from certain htmlspecialchars calls being made without the ENT QUOTES flag. This occurs when the html escape function in lib/html.php is not used, leading to XSS. Recommendations: For versions prior to 1.1.37, update to version 1.1.37 or later to resolve the issue. As a temporary workaround, consider modifying the htmlspecialchars calls to include the ENT QUOTES flag until a patch is available. Restrict access to potentially vulnerable pages to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Cacti version 1.1.25 **Description** The issue is related to XSS in the include/global session.php file. This is due to the handling of (1) the URI or (2) the refresh page. **Recommendations** For Cacti version 1.1.25, update to a version that includes a fix for this issue, as using outdated versions may pose a security risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.