RaXnet Cacti 0.6.x/0.8.x - 'Auth_Login.php' SQL Injection

source: https://www.securityfocus.com/bid/10960/info RaXnet Cacti is reportedly affected by a remote SQL injection vulnerability. This issue occurs in the authlogin.php script due to a failure of the application to properly sanitize user-supplied "username" URI parameter input before using it in ...

RaXnet Cacti 0.6.x0.8.x - Auth_Login.php SQL Injection

RaXnet Cacti 0.6.x0.8.x - AuthLogin.php SQL Injection source: https://www.securityfocus.com/bid/10960/info RaXnet Cacti is reportedly affected by a remote SQL injection vulnerability. This issue occurs in the authlogin.php script due to a failure of the application to properly sanitize...

CVE-2002-1479

Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges...

DEBIAN-CVE-2002-1478

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode...

CVE-2002-1478

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode...

CVE-2002-1479

Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges...

CVE-2002-1478

Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode...

CVE-2002-1477

graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode...

CVE-2002-1477

graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode...

DEBIAN-CVE-2002-1477

graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode...

DEBIAN-CVE-2002-1479

Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges...

PT-2003-1215 · Cacti · Cacti

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 0.6.8 Description: The issue allows local users to access a MySQL username and password stored in plaintext in the config.php file, which has world-readable permissions. This could enable users to modify databases as t...

PT-2003-1214 · Cacti · Cacti

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 0.6.8 Description: The issue allows attackers to execute arbitrary commands via the "Data Input" option in console mode. Recommendations: For versions prior to 0.6.8, update to version 0.6.8 or later to resolve the iss...

PT-2003-1213 · Cacti · Cacti

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 0.6.8 Description: The issue allows remote authenticated Cacti administrators to execute arbitrary commands. This can be achieved by injecting shell metacharacters in the title during edit mode, specifically in the...

[SECURITY] [DSA 164-1] New cacti package fixes arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 164-1 [email protected] http://www.debian.org/security/ Martin Schulze September 10th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 164-1] New cacti package fixes arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 164-1 [email protected] http://www.debian.org/security/ Martin Schulze September 10th, 2002 http://www.debian.org/security/faq -...

DSA-164 cacti - arbitrary code execution

Bulletin has no description...

Cacti security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: Cacti security issues Original: http://www.knights-of-the-routing-table.org /advisories/krt00120020903cacti.txt - - General info - As quoted from http://www.rrdtool.org: "Cacti's goal is to be a complete frondend to rrdtool, storing all of the...