Cacti 0.8.7 (RedHat High Performance Computing [HPC]) - utilities.php?Filter Cross-Site Scripting

Cacti 0.8.7 RedHat High Performance Computing HPC - utilities.php?Filter Cross-Site Scripting source: https://www.securityfocus.com/bid/42575/info Cacti is prone to cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...

Cacti 0.8.7 (RedHat High Performance Computing [HPC]) - 'utilities.php?Filter' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42575/info Cacti is prone to cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the contex...

Debian Security Advisory DSA 2060-1 (cacti)

The remote host is missing an update to cacti announced via advisory DSA 2060-1. OpenVAS Vulnerability Test $Id: deb20601.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2060-1 cacti Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-2060-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: cacti

The remote host is missing an update to the system as announced in the referenced advisory. VID e02e6a4e-6b26-11df-96b2-0015587e2cc1 OpenVAS Vulnerability Test $ Description: Auto generated from VID e02e6a4e-6b26-11df-96b2-0015587e2cc1 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: cacti

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cacti - 'graph_view.php' Remote Command Execution (Metasploit)

$Id: cactigraphimageexec.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fedora 12 : cacti-0.8.7f-1.fc12 (2010-9047)

Upstream has released a new version. This fixes sql injection, cross site scripting issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 11 : cacti-0.8.7f-1.fc11 (2010-9062)

Upstream has released a new version. This fixes sql injection, cross site scripting issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 13 : cacti-0.8.7f-1.fc13 (2010-9036)

Upstream has released a new version. This fixes sql injection, cross site scripting issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

FreeBSD : cacti -- multiple vulnerabilities (e02e6a4e-6b26-11df-96b2-0015587e2cc1)

Multiple vulnerabilities have been reported to exist in older version of Cacti. The release notes of Cacti 0.8.7f summarizes the problems as follows : - SQL injection and shell escaping issues - Cross-site scripting issues - Cacti Graph Viewer SQL injection vulnerability %NASLMINLEVEL 70300 C...

Mandriva Update for cacti MDVSA-2010:117 (cacti)

Check for the Version of cacti OpenVAS Vulnerability Test Mandriva Update for cacti MDVSA-2010:117 cacti Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for cacti MDVSA-2010:117 (cacti)

Check for the Version of cacti OpenVAS Vulnerability Test Mandriva Update for cacti MDVSA-2010:117 cacti Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] [DSA 2060-1] New cacti packages fix SQL injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------------- Debian Security Advisory DSA-2060-1 [email protected] http://www.debian.org/security/ Nico Golde June 13th, 2010 http://www.debian.org/security/faq -...

Debian DSA-2060-1 : cacti - insufficient input sanitization

Stefan Esser discovered that cacti, a front-end to rrdtool for monitoring systems and services, is not properly validating input passed to the rraid parameter of the graph.php script. Due to checking the input of $REQUEST but using $GET input in a query an unauthenticated attacker is able to...

[SECURITY] [DSA 2060-1] New cacti packages fix SQL injection

--------------------------------------------------------------------------- Debian Security Advisory DSA-2060-1 [email protected] http://www.debian.org/security/ Nico Golde June 13th, 2010 http://www.debian.org/security/faq -...

DSA-2060-1 cacti - SQL injection

Bulletin has no description...

Fedora Update for cacti FEDORA-2010-9062

Check for the Version of cacti OpenVAS Vulnerability Test Fedora Update for cacti FEDORA-2010-9062 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for cacti FEDORA-2010-9062

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for mandriva-doc MDVA-2010:151 (mandriva-doc)

Check for the Version of mandriva-doc OpenVAS Vulnerability Test Mandriva Update for mandriva-doc MDVA-2010:151 mandriva-doc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...