CVE-2014-2326

Cross-site scripting XSS vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

UBUNTU-CVE-2014-2326

Cross-site scripting XSS vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2326

CVE-2014-2326 is an XSS vulnerability in Cacti, affecting 0.8.7g, 0.8.8b and earlier, via cdef.php (CDEF editing). Exploitation could inject arbitrary script in web context. Remediation per connected docs: upgrade to the patched release (e.g., Cacti 0.8.8d or later; vendors list updates such as 0...

CVE-2014-2326

Cross-site scripting XSS vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2326

Cross-site scripting XSS vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cacti未明HTML注入漏洞

Bugtraq ID:66390 CVE ID:CVE-2014-2326 Cacti是一套基于PHP,MySQL,SNMP及RRDTool开发的网络流量监测图形分析工具。 Cacti存在存储型跨站脚本漏洞，允许攻击者利用漏洞注入任意脚本代码和HTML，在目标用户浏览器上执行时，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 Cacti 0.8.7g 目前没有详细解决方案提供： http://www.cacti.net/...

Cacti跨站请求伪造漏洞

Bugtraq ID:66392 CVE ID:CVE-2014-2327 Cacti是一套基于PHP,MySQL,SNMP及RRDTool开发的网络流量监测图形分析工具。 Cacti存在跨站请求伪造漏洞，允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 0 Cacti 0.8.7g 目前没有详细解决方案提供： http://www.cacti.net/...

Cacti未明远程命令执行漏洞

Bugtraq ID:66387 CVE ID:CVE-2014-2328 Cacti是一套基于PHP,MySQL,SNMP及RRDTool开发的网络流量监测图形分析工具。 Cacti使用exec-like方法PHP函数调用，由于没有任何安全检查，允许攻击者利用漏洞提交恶意请求执行任意命令。 0 Cacti 0.8.7g 目前没有详细解决方案提供： http://www.cacti.net/...

GLSA-201401-20 : Cacti: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201401-20 Cacti: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could execute arbitrary SQL commands via...

Cacti: Multiple vulnerabilities

Background Cacti is a complete network graphing solution designed to harness the power of RRDTool’s data storage and graphing functionality. Description Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact A remote attacker...

Amazon Linux AMI : cacti (ALAS-2013-222)

1 snmp.php and 2 rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. Multiple SQL injection vulnerabilities in 1 apipoller.php and 2 utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL...

Fedora Update for cacti FEDORA-2013-15444

Check for the Version of cacti OpenVAS Vulnerability Test Fedora Update for cacti FEDORA-2013-15444 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Update for cacti FEDORA-2013-15466

Check for the Version of cacti OpenVAS Vulnerability Test Fedora Update for cacti FEDORA-2013-15466 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Update for cacti FEDORA-2013-15444

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for cacti FEDORA-2013-15466

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2747-1] cacti security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2747-1 [email protected] http://www.debian.org/security/ Florian Weimer August 31, 2013 http://www.debian.org/security/faq -...

[SECURITY] Fedora 19 Update: cacti-0.8.8b-2.fc19

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

[SECURITY] Fedora 18 Update: cacti-0.8.8b-2.fc18

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

Fedora 18 : cacti-0.8.8b-2.fc18 (2013-15444)

This update fixes two cross-site scripting issues and one SQL injection issue in the latest version of Cacti. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...