3446 matches found
CVE-2020-14295
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries...
CVE-2020-14295
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries...
CVE-2020-14295
CVE-2020-14295 is a SQL injection in Cacti 1.2.12's color.php (via the filter parameter) that can lead to remote command execution due to stacked queries. Evidence shows exploits/modules exist (e.g., Metasploit references) and public advisories describe the vulnerability. Mitigation observed in u...
Cacti color filter authenticated SQLi to RCE
This module exploits a SQL injection vulnerability in Cacti 1.2.12 and before. An admin can exploit the filter variable within color.php to pull arbitrary values as well as conduct stacked queries. With stacked queries, the pathphpbinary value is changed within the settings table to a payload, an...
CVE-2020-14295
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries. Recent assessments: h00die at May 31, 2021 12:03pm UTC reported: Authenticated user is able to cause a...
Fedora: Security Advisory for cacti-spine (FEDORA-2020-d50b988a2f)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for cacti-spine (FEDORA-2020-8560db8779)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for cacti (FEDORA-2020-d50b988a2f)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for cacti (FEDORA-2020-8560db8779)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 31 Update: cacti-spine-1.2.12-1.fc31
Spine is a supplemental poller for Cacti that makes use of pthreads to achi eve excellent performance...
[SECURITY] Fedora 31 Update: cacti-1.2.12-1.fc31
Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...
[SECURITY] Fedora 32 Update: cacti-spine-1.2.12-1.fc32
Spine is a supplemental poller for Cacti that makes use of pthreads to achi eve excellent performance...
[SECURITY] Fedora 32 Update: cacti-1.2.12-1.fc32
Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...
Fedora 32 : cacti / cacti-spine (2020-8560db8779)
Update to 1.2.12 Release notes: https://www.cacti.net/releasenotes.php?version=1.2.12 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...
Fedora 31 : cacti / cacti-spine (2020-d50b988a2f)
Update to 1.2.12 Release notes: https://www.cacti.net/releasenotes.php?version=1.2.12 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...
Cacti < 1.2.11 Multiple Vulnerabilities - Linux
Cacti is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cacti:cacti"; ifdescription...
Cacti < 1.2.11 Multiple Vulnerabilities - Windows
Cacti is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cacti:cacti"; ifdescription...
Cacti Information Disclosure Vulnerability
Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to get the data , using RRDtool drawing graphs to analyze , and provide data and user management features . A security vulnerability exists in versions of Cacti prior to 1.2.1...
Cacti Cross-Site Request Forgery Vulnerability (CNVD-2021-37698)
Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to get the data , using RRDtool drawing graphs to analyze , and provide data and user management features . A cross-site request forgery vulnerability exists in...
