EUVD-2013-1472

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in 1 apipoller.php and 2 utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-1434

Cacti prior to version 0.8.8b contains multiple SQL injection vulnerabilities in api_poller.php and utility.php that allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Public advisories (openSUSE/SUSe, Gentoo GLSA, Amazon Linux ALAS) indicate upgrading to 0.8.8b fix...

PT-2013-3135

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 0.8.8b Description The issue concerns SQL injection vulnerabilities in the api poller.php and utility.php files. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. Recommendations For versio...

CVE-2013-1434: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in 1 apipoller.php and 2 utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL commands via unspecified vectors...