Debian: Security Advisory (DLA-560-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Open Source Cacti vulnerability affects IBM Platform RTM (CVE-2016-3172, CVE-2016-3659)

Summary Cacti is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the tree.php script using the parentid parameter, which could allow the attacker to view, add, modify or delete information in the back-end database. A remote attacker could send...

DLA-560-2 cacti - regression update

Bulletin has no description...

DLA-560-1 cacti - security update

Bulletin has no description...

Debian DLA-560-2 : cacti regression update

Three security issues have been found in cacti : CVE-2016-2313 authlogin.php allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user not in the cacti database. CVE-2016-3172 A SQL injection vulnerability in tree.php allows remote...

[SECURITY] [DLA 560-1] cacti security update

Package : cacti Version : 0.8.8a+dfsg-5+deb7u9 CVE ID : CVE-2016-2313 CVE-2016-3172 CVE-2016-3659 Three security issues have been found in cacti: CVE-2016-2313 authlogin.php allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user...

openSUSE Security Update : cacti (openSUSE-2016-601)

This update for cacti fixes the following issues : Security issues fixed : - CVE-2016-3172: SQL injection in tree.php boo971357 - CVE-2016-3659: SQL injection in lib/functions.php boo974013 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

CVE-2016-3172

SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parentid parameter in an itemedit action...

CVE-2016-3172

CVE-2016-3172 affects Cacti up to 0.8.8g. It is a SQL injection in tree.php (parameter: parent_id in item_edit) that allows remote authenticated users to execute arbitrary SQL commands against the back-end database. Documented impacts include viewing, adding, modifying, or deleting data; CVSS v3....