CVE-2015-4634 | BDVDB-2026-70885 Detail

Description#

SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lists.opensuse.org/opensuse-updates/2015-07/msg00052.html
http://www.securitytracker.com/id/1032989
http://www.cacti.net/release_notes_0_8_8e.php
http://www.debian.org/security/2015/dsa-3312
http://bugs.cacti.net/view.php?id=2577

Exploit#

No public exploit known

History#

Version 12015-08-11Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.