3517 matches found
Sql injection
SQL injection vulnerability in templatesexport.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the exportitemid parameter...
CVE-2010-1431
The CVE-2010-1431 entry affects Cacti up to version 0.8.7e, where templates_export.php is vulnerable to SQL injection via the export_item_id parameter. This allows remote attackers to execute arbitrary SQL commands against the database. Multiple advisories confirm the issue and patches exist (e.g...
CVE-2010-1431
SQL injection vulnerability in templatesexport.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the exportitemid parameter...
CVE-2010-1431
SQL injection vulnerability in templatesexport.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the exportitemid parameter...
Debian: Security Advisory (DSA-2039-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 2039-1 (cacti)
The remote host is missing an update to cacti announced via advisory DSA 2039-1. OpenVAS Vulnerability Test $Id: deb20391.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2039-1 cacti Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
FreeBSD Ports: cacti
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: cacti
The remote host is missing an update to the system as announced in the referenced advisory. VID 5198ef84-4fdc-11df-83fb-0015587e2cc1 OpenVAS Vulnerability Test $ Description: Auto generated from VID 5198ef84-4fdc-11df-83fb-0015587e2cc1 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Cacti Detection (deprecated)
This plugin has been deprecated. Use cactidetect.nasl plugin ID 173896 instead. C Tenable, Inc. @DEPRECATED@ Disabled on 2024/08/06. Deprecated by cactdetect.nasl. include"compat.inc"; if description scriptid46221; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate",...
Cacti < 0.8.7f Multiple Input Validation Vulnerabilities
According to its self-reported version number, the Cacti application running on the remote web server is prior to version 0.8.7f. It is, therefore, potentially affected by the following vulnerabilities : - A vulnerability exists in 'templatesexport.php' due to improper validation of input to the...
Bonsai Information Security - OS Command Injection in Cacti <= 0.8.7e
OS Command Injection in Cacti ============================= http://www.bonsai-sec.com/en/research/vulnerability.php ============================= 1. Advisory Information Advisory ID: BONSAI-2010-0105 Date published: 2010-04-21 Vendors contacted: Cacti Release mode: Coordinated release 2...
Bonsai Information Security - SQL Injection in Cacti <= 0.8.7e
SQL Injection in Cacti ====================== http://www.bonsai-sec.com/en/research/vulnerability.php ====================== 1. Advisory Information Advisory ID: BONSAI-2010-0104 Date published: 2010-04-21 Vendors contacted: Cacti Release mode: Coordinated release 2. Vulnerability Information...
openSUSE Security Update : cacti (openSUSE-SU-2010:0181-1)
Missing input sanitation in the template export feature allowed for SQL injection attacks CVE-2010-1431. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cacti-2365. The text description of thi...
Debian DSA-2039-1 : cacti - missing input sanitising
It was discovered that Cacti, a frontend to rrdtool for monitoring systems and services missed input sanitising, making a SQL injection attack possible. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
[SECURITY] [DSA 2039-1] New cacti packages fix missing input sanitising
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2039-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 23, 2010 http://www.debian.org/security/faq -...
FreeBSD : cacti -- SQL injection and command execution vulnerabilities (5198ef84-4fdc-11df-83fb-0015587e2cc1)
Bonsai information security reports : A Vulnerability has been discovered in Cacti, which can be exploited by any user to conduct SQL Injection attacks. Input passed via the 'exportitemid' parameter to 'templatesexport.php' script is not properly sanitized before being used in a SQL query. The sa...
[SECURITY] [DSA 2039-1] New cacti packages fix missing input sanitising
------------------------------------------------------------------------ Debian Security Advisory DSA-2039-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 23, 2010 http://www.debian.org/security/faq -...
DSA-2039-1 cacti - missing input sanitising
Bulletin has no description...
Cacti Multiple Input Validation Security Vulnerabilities
Cacti is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include SQL-injection and command-injection issues. Exploiting these issues can allow an attacker to compromise the application, access or modify data, or...
Cacti Multiple Input Validation Security Vulnerabilities
Cacti is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include SQL-injection and command-injection issues. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...