Lucene search

K
archlinuxArch LinuxASA-201602-24
HistoryFeb 28, 2016 - 12:00 a.m.

cacti: sql injection

2016-02-2800:00:00
Arch Linux
lists.archlinux.org
16

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

84.9%

  • CVE-2015-8604 (sql injection)
    SQL injection in graphs_new.php.

  • CVE-2015-8377 (sql injection)
    SQL injection vulnerability in the host_new_graphs_save function in
    graphs_new.php.

  • CVE-2015-8369 (sql injection)
    SQL injection in graph.php.

OSVersionArchitecturePackageVersionFilename
anyanyanycacti< 0.8.8_g-2UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

84.9%