openSUSE Security Update : cacti and cacti-spine (openSUSE-2017-1173)

This update for cacti and cacti-spine fixes the following issues : Build version 1.1.26 - issue841: --input-fields variable not working with addgraphs.php cli - issue986: Resolve minor appearance problem on Modern theme - issue989: Resolve issue with data input method commands loosing spaces on...

openSUSE Security Update : cacti / cacti-spine (openSUSE-2017-999)

This update for cacti and cacti-spine fixes security issues and bugs. The following vulnerabilities were fixed : - CVE-2017-12927: Cross-site scripting vulnerability in methodparameter bsc1054390 - CVE-2017-12978:Cross-site scripting vulnerability via the title field bsc1054742 It also contains a...

openSUSE Security Update : cacti / cacti-spine (openSUSE-2017-889)

This update for cacti, cacti-spine fixes the following issues : - CVE-2017-12065: Possible code execution via avgnan, outlier-start, or outlier-end parameter bsc1051633 - CVE-2017-11691: XSS in authprofile.php allows remote attackers to inject arbitrary JS via specially crafted HTTP Referer heade...

openSUSE Security Update : cacti (openSUSE-2016-198)

cacti was updated to fix the following vulnerabilities : - CVE-2015-8369: SQL injection in graph.php boo958863 - CVE-2015-8604: SQL injection in graphsnew.php boo960678 - CVE-2015-8377: SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php boo958977 - CVE-2016-2313:...

openSUSE Security Update : cacti-spine (openSUSE-2016-202)

cacti-spine was updated to match the cacti version, fixing a number of upstream bugs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-202. The text description of this plugin is ...

openSUSE Security Update : cacti (openSUSE-SU-2014:0600-1)

cacti was patched to fix several security issues : - CVE-2013-5588: XSS injection vulnerability - CVE-2013-5589: SQL injection vulnerability - CVE-2014-2326: XSS injection vulnerability - CVE-2014-2328: Remote Command Execution Vulnerability - CVE-2014-2708: SQL Injection Vulnerability -...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in SPINE allows remote attackers to perform unauthorized actions as administrators via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2007-0101

Cross-site request forgery CSRF vulnerability in SPINE allows remote attackers to perform unauthorized actions as administrators via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2007-0101

CVE-2007-0101 describes a cross-site request forgery (CSRF) vulnerability in SPINE that allows remote attackers to perform unauthorized administrative actions in SPINE via unspecified vectors. The affected product is SPINE; the underlying cause is a CSRF flaw enabling privileged actions. The avai...

CVE-2007-0101

Cross-site request forgery CSRF vulnerability in SPINE allows remote attackers to perform unauthorized actions as administrators via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2006-6894

Technical details of CVE-2006-6894 are not publicly available in the provided documents; no concrete affected products, versions, or exploit information are given. Monitor for updates.

CVE-2006-6894

Multiple unspecified vulnerabilities in SPINE before 1.2 have unknown impact and attack vectors, related to 1 "Placeholders in database handler" and 2 "Macro admin security."...

CVE-2007-0101: Undefined Security Weakness

Cross-site request forgery CSRF vulnerability in SPINE allows remote attackers to perform unauthorized actions as administrators via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2006-6894: Undefined Security Weakness

Multiple unspecified vulnerabilities in SPINE before 1.2 have unknown impact and attack vectors, related to 1 "Placeholders in database handler" and 2 "Macro admin security."...

[SA23537] SPINE Cross-Site Request Forgery Vulnerability

TITLE: SPINE Cross-Site Request Forgery Vulnerability SECUNIA ADVISORY ID: SA23537 VERIFY ADVISORY: http://secunia.com/advisories/23537/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: SPINE 1.x http://secunia.com/product/13145/ DESCRIPTION:...

CVE-2006-6894

Multiple unspecified vulnerabilities in SPINE before 1.2 have unknown impact and attack vectors, related to 1 "Placeholders in database handler" and 2 "Macro admin security."...