Medium: cacti

Issue Overview: include/globalsession.php in Cacti 1.1.25 has XSS related to 1 the URI or 2 the refresh page. CVE-2017-15194 Affected Packages: cacti Issue Correction: Run yum update cacti or yum update --advisory ALAS-2017-923 to update your system. New Packages: noarch: ...

Cacti 1.1.27 Multiple Vulnerabilities - Windows

Cacti through 1.1.27 is prone to following vulnerabilities: - Reflected XSS - Authenticated information disclosure - Authenticated remote code execution SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cacti 1.1.27 Multiple Vulnerabilities - Linux

Cacti through 1.1.27 is prone to following vulnerabilities: - Reflected XSS - Authenticated information disclosure - Authenticated remote code execution SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cacti cross-site scripting vulnerability (CNVD-2017-36486)

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to get the data , using RRDtool drawing graphs to analyze , and provide data and user management features . A cross-site scripting vulnerability exists in Cacti version 1.1.27...

GLSA-201711-10 : Cacti: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201711-10 Cacti: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could execute arbitrary code or bypass...

[SECURITY] Fedora 27 Update: cacti-1.1.26-1.fc27

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

[SECURITY] Fedora 27 Update: cacti-1.1.26-1.fc27

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...

Cacti: Multiple vulnerabilities

Background Cacti is a complete frontend to rrdtool. Description Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact Remote attackers could execute arbitrary code or bypass intended access restrictions. Workaround There is ...

Cross site scripting

Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...

CVE-2017-16785

Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...

CVE-2017-16785

Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...

UBUNTU-CVE-2017-16785

Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...

CVE-2017-16785

Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...

DEBIAN-CVE-2017-16785

Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...

CVE-2017-16785

CVE-2017-16785 affects Cacti 1.1.27 and is a reflected XSS via PATH_INFO to host.php. Connected advisories show multiple vendors/osses reporting the issue as part of a 1.1.28 fix set. Impact per Arch Linux advisory: for remote authenticated admins there is cross-site scripting risk; updates fix t...

CVE-2017-16785

Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...

CVE-2017-16785

Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...

CVE-2017-16661

Cacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the Log Path into a private directory, and then making a clog.php?filename= request, as demonstrated by filename=passwd with a Log Path under /etc to read /etc/passwd...

CVE-2017-16660

Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remoteagent.php request containing PHP code in a Client-ip header...

CVE-2017-16661

Cacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the Log Path into a private directory, and then making a clog.php?filename= request, as demonstrated by filename=passwd with a Log Path under /etc to read /etc/passwd...