No title provided

SQL injection vulnerability in templatesexport.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the exportitemid parameter...

No title provided

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 graph.php, 2 include/topgraphheader.php, 3 lib/htmlform.php, and 4 lib/timespansettings.php, as demonstrated by the a graphend or b graphstart...

No title provided

Cacti before 0.8.7f, as used in Red Hat High Performance Computing HPC Solution and other products, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in 1 the FQDN field of a Device or 2 the Vertical Label field of a Graph Template...

No title provided

Multiple cross-site scripting XSS vulnerabilities in Cacti before 0.8.7f, as used in Red Hat High Performance Computing HPC Solution and other products, allow remote attackers to inject arbitrary web script or HTML via the 1 hostname or 2 description parameter to host.php, or 3 the hostid paramet...

No title provided

Multiple cross-site scripting XSS vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing HPC Solution and other products, allow remote attackers to inject arbitrary web script or HTML via 1 the name element in an XML template to templatesimport.php; and allow remote...

No title provided

Cross-site scripting XSS vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red Hat High Performance Computing HPC Solution and other products, allows remote attackers to inject arbitrary web script or HTML via the filter parameter...

Cacti 0.8.7 (RedHat High Performance Computing [HPC]) - utilities.php?Filter Cross-Site Scripting

Cacti 0.8.7 RedHat High Performance Computing HPC - utilities.php?Filter Cross-Site Scripting source: https://www.securityfocus.com/bid/42575/info Cacti is prone to cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...

Cacti 0.8.7 (RedHat High Performance Computing [HPC]) - 'utilities.php?Filter' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42575/info Cacti is prone to cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the contex...

FreeBSD Ports: cacti

The remote host is missing an update to the system as announced in the referenced advisory. VID e02e6a4e-6b26-11df-96b2-0015587e2cc1 OpenVAS Vulnerability Test $ Description: Auto generated from VID e02e6a4e-6b26-11df-96b2-0015587e2cc1 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 2060-1 (cacti)

The remote host is missing an update to cacti announced via advisory DSA 2060-1. OpenVAS Vulnerability Test $Id: deb20601.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2060-1 cacti Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-2060-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: cacti

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cacti - 'graph_view.php' Remote Command Execution (Metasploit)

$Id: cactigraphimageexec.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fedora 13 : cacti-0.8.7f-1.fc13 (2010-9036)

Upstream has released a new version. This fixes sql injection, cross site scripting issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 12 : cacti-0.8.7f-1.fc12 (2010-9047)

Upstream has released a new version. This fixes sql injection, cross site scripting issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 11 : cacti-0.8.7f-1.fc11 (2010-9062)

Upstream has released a new version. This fixes sql injection, cross site scripting issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

FreeBSD : cacti -- multiple vulnerabilities (e02e6a4e-6b26-11df-96b2-0015587e2cc1)

Multiple vulnerabilities have been reported to exist in older version of Cacti. The release notes of Cacti 0.8.7f summarizes the problems as follows : - SQL injection and shell escaping issues - Cross-site scripting issues - Cacti Graph Viewer SQL injection vulnerability %NASLMINLEVEL 70300 C...

Mandriva Update for cacti MDVSA-2010:117 (cacti)

Check for the Version of cacti OpenVAS Vulnerability Test Mandriva Update for cacti MDVSA-2010:117 cacti Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for cacti MDVSA-2010:117 (cacti)

Check for the Version of cacti OpenVAS Vulnerability Test Mandriva Update for cacti MDVSA-2010:117 cacti Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] [DSA 2060-1] New cacti packages fix SQL injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------------- Debian Security Advisory DSA-2060-1 [email protected] http://www.debian.org/security/ Nico Golde June 13th, 2010 http://www.debian.org/security/faq -...