CVE-2015-0916

SQL injection vulnerability in graph.php in Cacti before 0.8.6f allows remote authenticated users to execute arbitrary SQL commands via the localgraphid parameter, a different vulnerability than CVE-2007-6035...

CVE-2015-0916

SQL injection vulnerability in graph.php in Cacti before 0.8.6f allows remote authenticated users to execute arbitrary SQL commands via the localgraphid parameter, a different vulnerability than CVE-2007-6035...

CVE-2015-0916

SQL injection vulnerability in graph.php in Cacti before 0.8.6f allows remote authenticated users to execute arbitrary SQL commands via the localgraphid parameter, a different vulnerability than CVE-2007-6035...

CVE-2015-0916: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in graph.php in Cacti before 0.8.6f allows remote authenticated users to execute arbitrary SQL commands via the localgraphid parameter, a different vulnerability than CVE-2007-6035...

PT-2015-4966

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 0.8.6f Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the local graph id parameter in the "graph.php" file. Recommendations For versions prior to 0.8.6f,...

Cacti 0.8.x graph.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/37109/info Cacti is prone to multiple cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied...

MyOWNspace 8.2 - Multi Local File Include

No description provided by source. =========================================================================== Topic : MyOWNspacev8.2 Bug type : multi local file include Download : http://sourceforge.net/project/platformdownload.php?groupid=174729 Advisory :...

PT-2012-2027

Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.0.1 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the style parameter in the status rrd graph.php...

CVE-2010-4246

Multiple cross-site scripting XSS vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via the 1 ifnum or 2 ifname parameter, a different vulnerability than CVE-2008-1182...

CVE-2010-4246: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via the 1 ifnum or 2 ifname parameter, a different vulnerability than CVE-2008-1182...

PT-2010-5488

Multiple cross-site scripting XSS vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via 1 the id parameter in an olsrd.xml action to pkg edit.php, 2 the xml parameter to pkg.php, or the if parameter to 3 status graph.php or 4 interfaces.php, a...

PT-2010-5376

Name of the Vulnerable Software and Affected Versions pfSense versions 1.2.3 through 2 beta 4 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the ifnum or ifname parameters in...

CVE-2010-2545

Cacti before 0.8.7g contains multiple XSS vulnerabilities (including CVE-2010-2545) in various templates and admin paths. The GLSA notes remote script injection and the need to upgrade to the 0.8.8+ series as remediation; affected vectors include template name and numerous PHP/graph-related compo...

CVE-2010-2543: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in include/topgraphheader.php in Cacti before 0.8.7g allows remote attackers to inject arbitrary web script or HTML via the graphstart parameter to graph.php. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-4032.2.b...

CVE-2010-2545: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing HPC Solution and other products, allow remote attackers to inject arbitrary web script or HTML via 1 the name element in an XML template to templatesimport.php; and allow remote...

CVE-2010-2092

SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rraid parameter in a GET request in conjunction with a valid rraid value in a POST request or a cookie, which causes the POST or cookie value to bypass the...

CVE-2010-2092: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rraid parameter in a GET request in conjunction with a valid rraid value in a POST request or a cookie, which causes the POST or cookie value to bypass the...

MyOWNspace 8.2 - Multiple Local File Inclusions

MyOWNspace 8.2 - Multiple Local File Inclusions =========================================================================== Topic : MyOWNspacev8.2 Bug type : multi local file include Download : http://sourceforge.net/project/platformdownload.php?groupid=174729 Advisory :...

MyOWNspace v8.2 multi local file include

Exploit for php platform in category web applications ======================================== MyOWNspace v8.2 multi local file include ======================================== =========================================================================== Topic : MyOWNspacev8.2 Bug type : multi loca...

MyOWNspace 8.2 - Multiple Local File Inclusions

=========================================================================== Topic : MyOWNspacev8.2 Bug type : multi local file include Download : http://sourceforge.net/project/platformdownload.php?groupid=174729 Advisory : =========================================================================...