3446 matches found
CVE-2015-8369
SQL injection vulnerability in include/topgraphheader.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rraid parameter in a properties action to graph.php...
CVE-2015-8369
CVE-2015-8369 affects Cacti (0.8.8f and earlier). The SQL injection occurs in include/top_graph_header.php via the rra_id parameter used in a properties action to graph.php, allowing remote commands to interact with the database. Impact: arbitrary SQL execution with the app’s privileges. Mitigati...
Debian DSA-3423-1 : cacti - security update
Several SQL injection vulnerabilities have been discovered in Cacti, an RRDTool frontend written in PHP. Specially crafted input can be used by an attacker in the rraid value of the graph.php script to execute arbitrary SQL commands on the database. %NASLMINLEVEL 70300 C Tenable Network Security,...
[SECURITY] [DSA 3423-1] cacti security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3423-1 [email protected] https://www.debian.org/security/ Luciano Bello December 16, 2015 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3423-1] cacti security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3423-1 [email protected] https://www.debian.org/security/ Luciano Bello December 16, 2015 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3423-1 (cacti - security update)
Several SQL injection vulnerabilities have been discovered in Cacti, an RRDTool frontend written in PHP. Specially crafted input can be used by an attacker in the rraid value of the graph.php script to execute arbitrary SQL commands on the database. OpenVAS Vulnerability Test $Id: deb3423.nasl 66...
DSA-3423-1 cacti - security update
Bulletin has no description...
CVE-2015-8377
SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted serialized data in the selectedgraphsarray parameter in a save action...
CVE-2015-8377
SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted serialized data in the selectedgraphsarray parameter in a save action...
DEBIAN-CVE-2015-8377
SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted serialized data in the selectedgraphsarray parameter in a save action...
UBUNTU-CVE-2015-8377
SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted serialized data in the selectedgraphsarray parameter in a save action...
CVE-2015-8377
SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted serialized data in the selectedgraphsarray parameter in a save action...
Sql injection
SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted serialized data in the selectedgraphsarray parameter in a save action...
CVE-2015-8377
SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted serialized data in the selectedgraphsarray parameter in a save action...
CVE-2015-8377
CVE-2015-8377 affects Cacti up to version 0.8.8f. The vulnerability is a SQL injection in the host_new_graphs_save function (graphs_new.php) that allows remote authenticated users to execute arbitrary SQL commands via crafted serialized data in the selected_graphs_array parameter during a save ac...
CVE-2015-8377
SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted serialized data in the selectedgraphsarray parameter in a save action...
Debian: Security Advisory (DSA-3423-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cacti 0.8.8f SQL Injection Vulnerability
Cacti versions 0.8.8f and below suffer from a remote SQL injection vulnerability. Application: Cacti Vendor URL: http://www.cacti.net Bugs: SQL injection Author:changzhao.maoDBAPPSecurity Ltd Version affected: 0.8.8f and prior ================================ Introduction...
Cacti 0.8.8f SQL Injection
Application: Cacti Vendor URL: http://www.cacti.net Bugs: SQL injection Author:changzhao.maoDBAPPSecurity Ltd Version affected: 0.8.8f and prior ================================ Introduction ================================ Cacti is a complete frontend to RRDTool, it stores all of the necessary...
cacti -- SQL injection vulnerabilities
NVD reports: SQL injection vulnerability in include/topgraphheader.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rraid parameter in a properties action to graph.php...