DLA-386-1 cacti - security update

Bulletin has no description...

Cacti 0.8.8f graphs_new.php SQL注入漏洞

关键代码如下 function formsave if isset$POST"savecomponentgraph" / summarize the 'create graph from host template/snmp index' stuff into an array / while list$var, $val = each$POST if pregmatch'/^cg\d+$/', $var, $matches $selectedgraphs"cg"$matches1$matches1 = true; //cgg is not filtered elseif...

Cacti 0.8.8f graphs_new.php SQL Injection

Application: Cacti Vendor URL: http://www.cacti.net Bugs: SQL injection Author:changzhao.maoDBAPPSecurity Ltd Version affected: 0.8.8f and prior ================================ Introduction ================================ Cacti is a complete frontend to RRDTool, it stores all of the necessary...

FreeBSD : cacti -- SQL injection vulnerabilities (bb961ff3-b3a4-11e5-8255-5453ed2e2b49)

NVD reports : SQL injection vulnerability in include/topgraphheader.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rraid parameter in a properties action to graph.php. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

[SECURITY] [DLA 374-3] cacti regression update

Package : cacti Version : 0.8.7g-1+squeeze9+deb6u13 CVE ID : CVE-2015-8369 Debian Bug : 807599 It was discovered that there was a regression in the patch intended to fix CVE-2015-8369 in the recent upload of cacti 0.8.7g-1+squeeze9+deb6u12. For Debian 6 Squeeze, this issue has been fixed in cacti...

DLA-374-3 cacti - regression update

Bulletin has no description...

[SECURITY] [DLA 374-2] cacti regression update

Package : cacti Version : 0.8.7g-1+squeeze9+deb6u12 It was discovered that there was a regression in the patch intended to fix CVE-2015-8369 in the recent upload of cacti 0.8.7g-1+squeeze9+deb6u11. For Debian 6 Squeeze, this issue has been fixed in cacti version 0.8.7g-1+squeeze9+deb6u12. Regards...

Cacti SQL注入漏洞（CNVD-2015-08486）

0x01 漏洞简述 Cacti是Cacti集团的一套开源的网络流量监测和分析工具。该工具通过snmpget来获取数据，使用RRDtool绘画图形进行分析，并提供数据和用户管理功能。 Cacti 0.8.8f以前版本存在SQL注入漏洞。允许远程攻击者通过graphphp属性行动中的rraid参数执行任意SQL命令。 0x02 漏洞细节 漏洞存在于文件 /cacti-0.8.8f/graph.php line 25 includeonce"./include/topgraphheader.php"; / set default action / if !isset"action"...

DLA-374-2 cacti - regression update

Bulletin has no description...

Debian DLA-374-3 : cacti regression update

It was discovered that there was a regression in the patch intended to fix CVE-2015-8369 in the recent upload of cacti 0.8.7g-1+squeeze9+deb6u12. For Debian 6 Squeeze, this issue has been fixed in cacti version 0.8.7g-1+squeeze9+deb6u13. NOTE: Tenable Network Security has extracted the preceding...

[SECURITY] [DLA 374-1] cacti security update

Package : cacti Version : 0.8.7g-1+squeeze9+deb6u11 CVE IDs : CVE-2015-8369 CVE-2015-8377 Debian Bug : 807599 It was discovered that there were SQL injection vulnerabilities in cacti, a web interface for graphing of monitoring systems. For Debian 6 Squeeze, this issue has been fixed in cacti...

DLA-374-1 cacti - security update

Bulletin has no description...

Cacti SQL Injection Vulnerability (CNVD-2015-08486)

Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti Group. The tool through snmpget to obtain data , using RRDtool drawing graphs to analyze , and provide data and user management features . A SQL injection vulnerability exists in Cacti versions prior to...

Cacti host_new_graphs_save function SQL injection vulnerability

Cacti is a rotating database RRD tool. In Cacti 0.8.8f and earlier versions, a sql injection vulnerability exists in the function hostnewgraphssave within graphsnew.php. An attacker can exploit this vulnerability to execute arbitrary sql commands...

CVE-2015-8369

SQL injection vulnerability in include/topgraphheader.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rraid parameter in a properties action to graph.php...

CVE-2015-8369

SQL injection vulnerability in include/topgraphheader.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rraid parameter in a properties action to graph.php...

DEBIAN-CVE-2015-8369

SQL injection vulnerability in include/topgraphheader.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rraid parameter in a properties action to graph.php...

UBUNTU-CVE-2015-8369

SQL injection vulnerability in include/topgraphheader.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rraid parameter in a properties action to graph.php...

Sql injection

SQL injection vulnerability in include/topgraphheader.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rraid parameter in a properties action to graph.php...

CVE-2015-8369

SQL injection vulnerability in include/topgraphheader.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rraid parameter in a properties action to graph.php...