8 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-1000031
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQL injection vulnerability in graphtemplatesinputs.php in Cacti 0.8.8b allows remote attackers to execute arbitrary SQL commands via the graphtemplateinputid a...
SUSE CVE-2015-4454
SQL injection vulnerability in the gethashgraphtemplate function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via the graphtemplateid parameter to graphtemplates.php...
SUSE CVE-2017-1000031
SQL injection vulnerability in graphtemplatesinputs.php in Cacti 0.8.8b allows remote attackers to execute arbitrary SQL commands via the graphtemplateinputid and graphtemplateid parameters...
PT-2017-10741
Name of the Vulnerable Software and Affected Versions Cacti version 0.8.8b Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the graph template input id and graph template id parameters in the graph templates inputs.php file. Recommendations For...
Cacti 'get_hash_graph_template' function SQL injection vulnerability
Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti Group. The tool through snmpget to obtain data , using RRDtool drawing graphs to analyze , and provide data and user management features . A SQL injection vulnerability exists in the 'gethashgraphtemplate...
UBUNTU-CVE-2015-4454
SQL injection vulnerability in the gethashgraphtemplate function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via the graphtemplateid parameter to graphtemplates.php...
PT-2015-6594
Name of the Vulnerable Software and Affected Versions Cacti versions prior to 0.8.8d Description The issue concerns a SQL injection vulnerability in the get hash graph template function. This vulnerability allows remote attackers to execute arbitrary SQL commands via the graph template id paramet...
PT-2014-5664
Name of the Vulnerable Software and Affected Versions Cacti version 0.8.8b Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The affected parameters include drp action to various P...