Cacti 0.8.6i - 'copy_cacti_user.php' SQL Injection Create Admin

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d1,3.\d1,3.\d1,3:\d1,5\b'; function...

Cacti 0.8.6i - copy_cacti_user.php SQL Injection Create Admin

Cacti 0.8.6i - copycactiuser.php SQL Injection Create Admin 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result;...

Cacti 0.8.6i (copy_cacti_user.php) SQL Injection Create Admin Exploit

Exploit for unknown platform in category web applications ===================================================================== Cacti 0.8.6i copycactiuser.php SQL Injection Create Admin Exploit ===================================================================== 126 $result.=" ."; else $result.=...

Cacti cmd.php脚本远程SQL注入漏洞

Cacti是一款轮循数据库（RRD）工具，可帮助从数据库信息创建图形，有多个Linux版本。 Cacti的cmd.php脚本处理用户提交的参数数据时存在输入验证漏洞，远程攻击者可能利用此漏洞执行SQL注入攻击。 Cacti的cmd.php脚本没有正确验证对URL的输入，允许攻击者通过SQL注入非授权操作数据库。成功攻击要求打开了registerargcargv。此外没有过滤cmd.php中SQL查询的结果便用作了shell命令，这可能导致注入任意shell命令 Cacti Cacti 0.8.6i 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版...

Cacti <= 0.8.6i cmd.php popen() Remote Injection Exploit

No description provided by source. ?php printr' -------------------------------------------------------------------------------- Cacti = 0.8.6i "cmd.php" popen injection by rgod dork: intitle:"login to cacti" mail: retrog at alice dot it site: http://retrogod.altervista.org...

CVE-2006-6799

SQL injection vulnerability in Cacti 0.8.6i and earlier, when registerargcargv is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 second or 2 third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are...

CVE-2006-6799

SQL injection vulnerability in Cacti 0.8.6i and earlier, when registerargcargv is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 second or 2 third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are...

CVE-2006-6799

SQL injection vulnerability in Cacti 0.8.6i and earlier, when registerargcargv is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 second or 2 third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are...

DEBIAN-CVE-2006-6799

SQL injection vulnerability in Cacti 0.8.6i and earlier, when registerargcargv is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 second or 2 third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are...

CVE-2006-6799

SQL injection vulnerability in Cacti 0.8.6i and earlier, when registerargcargv is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 second or 2 third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are...

CVE-2006-6799

SQL injection vulnerability in Cacti 0.8.6i and earlier, when registerargcargv is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 second or 2 third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are...

CVE-2006-6799

CVE-2006-6799 : SQL injection in Cacti 0.8.6i and earlier when register_argc_argv is enabled. An attacker can supply the second or third argument to cmd.php to inject arbitrary SQL; the query results in polling_items are later used in a popen function, enabling potential arbitrary command executi...

CVE-2006-6799: Undefined Security Weakness

SQL injection vulnerability in Cacti 0.8.6i and earlier, when registerargcargv is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 second or 2 third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are...

cacti -- Multiple vulnerabilities

Secunia reports: rgod has discovered four vulnerabilities in Cacti, which can be exploited by malicious people to bypass certain security restrictions, manipulate data and compromise vulnerable systems...

Cacti 0.8.6i - cmd.php?popen() Remote Injection

Cacti 0.8.6i - cmd.php?popen Remote Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...

Cacti 0.8.6i - 'cmd.php?popen()' Remote Injection

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d1,3.\d1,3.\d1,3:\d1,5\b'; function...

Cacti <= 0.8.6i cmd.php popen() Remote Injection Exploit

Exploit for unknown platform in category web applications ======================================================== Cacti 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".deche...

Debian DSA-1031-1 : cacti - several vulnerabilities

Several vulnerabilities have been discovered in libphp-adodb, the 'adodb' database abstraction layer for PHP, which is embedded in cacti, a frontend to rrdtool for monitoring systems and services. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0146...

FreeBSD : cacti -- ADOdb 'server.php' Insecure Test Script Security Issue (79c1154d-d5a5-11da-8098-00123ffe8333)

Secunia reports : Cacti have a security issue, which can be exploited by malicious people to execute arbitrary SQL code and potentially compromise a vulnerable system. The problem is caused due to the presence of the insecure 'server.php' test script. %NASLMINLEVEL 70300 C Tenable Network Securit...

GLSA-200604-07 : Cacti: Multiple vulnerabilities in included ADOdb

The remote host is affected by the vulnerability described in GLSA-200604-07 Cacti: Multiple vulnerabilities in included ADOdb Several vulnerabilities have been identified in the copy of ADOdb included in Cacti. Andreas Sandblad discovered a dynamic code evaluation vulnerability CVE-2006-0147 and...