CVE-2011-2904

Cross-site scripting (XSS) vulnerability in acknow.php in Zabbix before 1.8.6 allows remote attackers to inject arbitrary web script or HTML via the backurl parameter.

Date published : 2011-08-19

http://www.securityfocus.com/bid/49016

http://www.zabbix.com/rn1.8.6.php