3446 matches found
CVE-2013-5589
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2013-5589
Cacti is affected by CVE-2013-5589 (SQL injection) in host.php via the id parameter. The initial description specifies impact on Cacti 0.8.8b and earlier. Public sources indicate that vulnerable versions include pre-0.8.8g/0.8.8b and that fixes were released in newer builds (e.g., 0.8.8c and late...
CVE-2013-5589
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2013-5588
CVE-2013-5588 affects Cacti prior to 0.8.8g (≤ 0.8.8b and earlier). The vulnerability is a cross-site scripting flaw exploitable via the installer/editing paths: the step parameter to install/index.php and the id parameter to cacti/host.php can lead to remote script/HTML injection. OpenVAS/Nessus...
CVE-2013-5588
Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the step parameter to install/index.php or 2 the id parameter to cacti/host.php...
DEBIAN-CVE-2013-1435
1 snmp.php and 2 rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...
CVE-2013-1435
1 snmp.php and 2 rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...
CVE-2013-1435
1 snmp.php and 2 rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...
DEBIAN-CVE-2013-1434
Multiple SQL injection vulnerabilities in 1 apipoller.php and 2 utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-1434
Multiple SQL injection vulnerabilities in 1 apipoller.php and 2 utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-1434
Multiple SQL injection vulnerabilities in 1 apipoller.php and 2 utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-1434
Multiple SQL injection vulnerabilities in 1 apipoller.php and 2 utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-1435
1 snmp.php and 2 rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...
UBUNTU-CVE-2013-1435
1 snmp.php and 2 rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...
Sql injection
Multiple SQL injection vulnerabilities in 1 apipoller.php and 2 utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
UBUNTU-CVE-2013-1434
Multiple SQL injection vulnerabilities in 1 apipoller.php and 2 utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
Code injection
1 snmp.php and 2 rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...
CVE-2013-1435
CVE-2013-1435 affects Cacti prior to version 0.8.8b. The vulnerability exists in (1) snmp.php and (2) rrd.php, allowing remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. Public advisories confirm the fix in 0.8.8b (and newer) to address this issue. Ex...