Lucene search
+L

Cacti link Local File Inclusion Remote Code Execution Vulnerability

🗓️ 04 Oct 2023 00:00:00Reported by AnonymousType 
zdi
 zdi
🔗 www.zerodayinitiative.com👁 37 Views

Cacti link Local File Inclusion Remote Code Execution Vulnerability allowing attackers to execute arbitrary code with authentication required. Lack of proper validation of database data.

Related
Refs
ReporterTitlePublishedViews
Family
alpinelinux
AlpineLinux
CVE-2023-39365
5 Sep 202321:03
–alpinelinux
bdu_fstec
BDU FSTEC
Cacti links SQLi
26 Sep 202300:00
–bdu_fstec
circl
Circl
CVE-2023-39365
6 Sep 202302:17
–circl
cnnvd
CNNVD
Cacti SQL Injection Vulnerability
5 Sep 202300:00
–cnnvd
cve
CVE
CVE-2023-39365
5 Sep 202321:03
–cve
cvelist
Cvelist
CVE-2023-39365 Unchecked regular expressions can lead to SQL Injection and data leakage in Cacti
5 Sep 202321:03
–cvelist
debian
Debian
[SECURITY] [DLA 3765-1] cacti security update
18 Mar 202418:26
–debian
debian
Debian
[SECURITY] [DSA 5550-1] cacti security update
8 Nov 202322:40
–debian
debiancve
Debian CVE
CVE-2023-39365
5 Sep 202321:03
–debiancve
nessus
Tenable Nessus
Debian dla-3765 : cacti - security update
18 Mar 202400:00
–nessus
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

04 Oct 2023 00:00Current
7High risk
Vulners AI Score7
CVSS 36.6
EPSS0.0085
37