9 matches found
EUVD-2007-3104
Malware in sbrugna...
CVE-2008-0785
Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated users to execute arbitrary SQL commands via the 1 graphlist parameter to graphview.php, 2 leafid and id parameters to tree.php, 3 localgraphid parameter to graphxport.php, and 4...
Electric Sheep Fencing pfSense 'graph' Parameter Command Execution Vulnerability
Electric Sheep Fencing pfsense is a free and open source FreeBSD-based firewall and router software from Electric Sheep Fencing. A security vulnerability exists in Electric Sheep Fencing pfSense versions prior to 2.3. A remote attacker can exploit this vulnerability by sending the 'graph' paramet...
CVE-2016-10709
pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the statusrrdgraphimg.php graph parameter, related to rrdgraphimg.php...
CVE-2017-16000
SQL injection vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capacityperlabel/index.php...
Sql injection
SQL injection vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capacityperlabel/index.php...
CVE-2017-16000
SQL injection vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capacityperlabel/index.php...
CVE-2016-4965
Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users with access to the nslookup functionality to execute arbitrary commands with root privileges via the graph parameter to diagnosiscontrol.php...
Fortinet FortiWAN Command Injection Vulnerability
Fortinet FortiWAN is a WAN link load balancing product developed by Fortinet. A command injection vulnerability exists in the diagnosiscontrol.php page in the Fortinet FortiWAN network load balancing appliance. The vulnerability can be exploited to inject arbitrary operating system commands with...