Описание
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | not-affected | 1.2.16+ds1-2ubuntu1 |
| eoan | ignored | end of life |
| esm-apps/bionic | released | 1.1.38+ds1-1ubuntu0.1~esm1 |
| esm-apps/focal | released | 1.2.10+ds1-1ubuntu1+esm1 |
| esm-apps/jammy | not-affected | 1.2.16+ds1-2ubuntu1 |
| esm-apps/noble | not-affected | 1.2.16+ds1-2ubuntu1 |
| esm-apps/xenial | not-affected | code not present |
| esm-infra-legacy/trusty | needs-triage | |
| focal | ignored | end of standard support, was needed |
Показывать по
6.5 Medium
CVSS2
7.2 High
CVSS3
Связанные уязвимости
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to ...
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.
6.5 Medium
CVSS2
7.2 High
CVSS3