Cacti sql_save SQL Injection

The vulnerability of the sqlsave function in the Cacti network monitoring software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to carry out attacks based on SQL injections...

PT-2023-5424

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.25 Description A defect in the sql save function was discovered in Cacti, an open source operational monitoring and fault management framework. When the column type is numeric, the sql save function directly utilize...