CVE-2014-2327

Cross-site request forgery CSRF vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to hijack the authentication of users for unspecified commands, as demonstrated by requests that 1 modify binary files, 2 modify configurations, or 3 add arbitrary users...

PT-2014-4627

Name of the Vulnerable Software and Affected Versions Cacti versions 0.8.7g and earlier Cacti version 0.8.8b Description A cross-site request forgery issue allows remote attackers to hijack user authentication for unspecified commands. This can be demonstrated by requests that modify binary files...