Поиск уязвимостей
Количество 7
Количество 7
CVE-2023-51448
Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection (SQLi) vulnerability within the SNMP Notification Receivers feature in the file `‘managers.php’`. An authenticated attacker with the “Settings/Utilities” permission can send a crafted HTTP GET request to the endpoint `‘/cacti/managers.php’` with an SQLi payload in the `‘selected_graphs_array’` HTTP GET parameter. As of time of publication, no patched versions exist.
CVE-2023-51448
Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection (SQLi) vulnerability within the SNMP Notification Receivers feature in the file `‘managers.php’`. An authenticated attacker with the “Settings/Utilities” permission can send a crafted HTTP GET request to the endpoint `‘/cacti/managers.php’` with an SQLi payload in the `‘selected_graphs_array’` HTTP GET parameter. As of time of publication, no patched versions exist.
CVE-2023-51448
Cacti provides an operational monitoring and fault management framewor ...
BDU:2024-00024
Уязвимость функции SNMP Notification Receivers сценария managers.php программного средства мониторинга сети Cacti, позволяющая нарушителю выполнить произвольный SQL-код
openSUSE-SU-2024:0031-1
Security update for cacti, cacti-spine
ALT-PU-2024-1003
ALT-PU-2024-1003: package `cacti` update to version 1.2.26-alt1
ALT-PU-2023-8407
ALT-PU-2023-8407: package `cacti` update to version 1.2.26-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-51448 Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection (SQLi) vulnerability within the SNMP Notification Receivers feature in the file `‘managers.php’`. An authenticated attacker with the “Settings/Utilities” permission can send a crafted HTTP GET request to the endpoint `‘/cacti/managers.php’` with an SQLi payload in the `‘selected_graphs_array’` HTTP GET parameter. As of time of publication, no patched versions exist. | CVSS3: 8.8 | 67% Средний | почти 3 года назад |
 | CVE-2023-51448 Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection (SQLi) vulnerability within the SNMP Notification Receivers feature in the file `‘managers.php’`. An authenticated attacker with the “Settings/Utilities” permission can send a crafted HTTP GET request to the endpoint `‘/cacti/managers.php’` with an SQLi payload in the `‘selected_graphs_array’` HTTP GET parameter. As of time of publication, no patched versions exist. | CVSS3: 8.8 | 67% Средний | почти 3 года назад |
| CVE-2023-51448 Cacti provides an operational monitoring and fault management framewor ... | CVSS3: 8.8 | 67% Средний | почти 3 года назад |
 | BDU:2024-00024 Уязвимость функции SNMP Notification Receivers сценария managers.php программного средства мониторинга сети Cacti, позволяющая нарушителю выполнить произвольный SQL-код | CVSS3: 8.8 | 67% Средний | почти 3 года назад |
 | openSUSE-SU-2024:0031-1 Security update for cacti, cacti-spine | почти 3 года назад | ||
| ALT-PU-2024-1003 ALT-PU-2024-1003: package `cacti` update to version 1.2.26-alt1 | CVSS3: 8.8 | почти 3 года назад | |
| ALT-PU-2023-8407 ALT-PU-2023-8407: package `cacti` update to version 1.2.26-alt1 | CVSS3: 8.8 | почти 3 года назад |
Уязвимостей на страницу