The vulnerability of the data_sources.php component of the Cacti network monitoring software lies in the lack of security measures for the website structure. This allows attackers to execute XSS attacks.

The vulnerability of the datasources.php component in the Cacti network monitoring software is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the reports_admin.php component in the Cacti network monitoring software allows a malicious attacker to execute XSS attacks remotely.

The vulnerability of the reportsadmin.php component in the Cacti network monitoring software, a database management system from Oracle, is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows an attacker to perform XSS attac...

The vulnerability of the auth_changepassword.php component of the Cacti network monitoring software allows a hacker to redirect users to any arbitrary URL address.

The vulnerability of the authchangepassword.php component of the Cacti network monitoring software is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to redirect a user to an arbitrary URL address...

The vulnerability of the graphs_new.php component in the Cacti network monitoring software allows a hacker to perform cross-site scripting attacks.

The vulnerability of the graphsnew.php component in the Cacti network monitoring software is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Cacti network monitoring software lies in the lack of authentication for critical functions, allowing attackers to escalate their privileges.

The vulnerability of the Cacti network monitoring software is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the sql_save function in the Cacti network monitoring software exists due to insufficient validation of input data, allowing attackers to carry out attacks based on SQL injections.

The vulnerability of the sqlsave function in the Cacti network monitoring software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to carry out attacks based on SQL injections...

The vulnerability of the “links” function in the Cacti network monitoring software allows a hacker to execute arbitrary SQL queries.

The vulnerability of the “links” function in the Cacti network monitoring software is related to the lack of validation for the sequences of XML objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the graph_xport.php component of the Cacti network monitoring software allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the graphxport.php component of the Cacti network monitoring software is related to an error in the handling of authentication keys controlled by users. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the cacti_ldap_auth() function in the network monitoring software Cacti allows a hacker to bypass the authentication process.

The vulnerability of the cactildapauth function in the network monitoring software Cacti is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to bypass the authentication process...

Security update for cacti, cacti-spine (important)

openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2023:0275-1 Rating: important References: 1215040 1215042 1215043 1215044 1215045 1215047 1215050 1215051 1215052 1215053 1215054 1215055 1215056 1215058 1215059 1215081 1215082 Cross-References:...

The vulnerability of the `grow_right_pane_tree()` function in the Cacti network monitoring software, which allows a hacker to execute arbitrary SQL queries.

The vulnerability of the growrightpanetree function in the Cacti network monitoring software’s script graphview.php relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using a specially...

The vulnerability of the ajax_hosts() and ajax_hosts_noany() functions (graphs.php) of the Cacti network monitoring tool allows a hacker to execute arbitrary SQL queries.

The vulnerability of the ajaxhosts and ajaxhostsnoany functions graphs.php of the Cacti network monitoring tool is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using a specially...

The vulnerability in the data_sources.php script of the Cacti network monitoring software allows a hacker to perform cross-site scripting attacks.

The vulnerability in the datasources.php script of the Cacti network monitoring software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Cross-site Scripting

Cacti is vulnerable to Cross-Site Scripting. This vulnerability exists in 'graphsnew.php' because user input is not properly validated, which allows an attacker to inject arbitrary code into the system...

OS Command Injection

cacti is vulnerable to OS Command Injection. The vulnerability exists in the snmp.php due to lack of parameter checks which allows an attacker to inject and execute arbitrary commands...

SQL Injection

cacti is vulnerable to SQL Injection attacks. This vulnerability allows an unauthenticated attacker to execute arbitrary code on a vulnerable Cacti server by sending a specially crafted HTTP request...

Cross-site Scripting (XSS)

cacti is vulnerable to Cross-site Scripting XSS. This vulnerability allows an authenticated attacker to inject malicious JavaScript code into the Cacti web application, which can then be executed by other authenticated users...

Open Redirect

cacti is vulnerable to Open Redirect. An attacker could exploit this vulnerability by tricking a user into performing a password change via a malicious phishing link. Once the user clicks on the phishing link and changes their password, they will be redirected to a malicious website where the...

SQL Injection

cacti is vulnerable to SQL Injection attacks. An attacker could exploit this vulnerability by sending a specially crafted SQL injection payload to a vulnerable Cacti server. This payload could allow the attacker to escalate their privileges to the root user or execute arbitrary code on the server...

SQL Injection

cacti is vulnerable to SQL Injection attacks. An attacker could exploit this vulnerability by sending a specially crafted SQL injection payload to a vulnerable Cacti server. This payload could allow the attacker to escalate their privileges to the root user or execute arbitrary code on the server...