exploitDog

GHSA-j268-9gfj-xh5m

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

Описание

SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.

SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2015-4634
http://bugs.cacti.net/view.php?id=2577
http://lists.opensuse.org/opensuse-updates/2015-07/msg00052.html
http://www.cacti.net/release_notes_0_8_8e.php
http://www.debian.org/security/2015/dsa-3312
http://www.securitytracker.com/id/1032989

EPSS

Процентиль: 81%

0.02178

Низкий

CVE ID

Дефекты

CWE-89

Связанные уязвимости

CVE-2015-4634

ubuntu

около 11 лет назад

SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.

CVE-2015-4634

nvd

около 11 лет назад

SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.

CVE-2015-4634

debian

около 11 лет назад

SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allow ...

EPSS

Процентиль: 81%

0.02178

Низкий

CVE ID

Дефекты

CWE-89