Lucene search

MitreCVE-2007-6035

HistoryNov 20, 2007 - 11:46 a.m.

CVE-2007-6035

2007-11-2011:46:00

CWE-89

mitre

web.nvd.nist.gov

cve

sql injection

graph.php

cacti

remote attackers

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.011

Percentile

85.0%

JSON

SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.

Affected configurations

Nvd

Node

cacticactiRange≤0.8.7

VendorProductVersionCPE
cacticacti*cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cacti	cacti	*	cpe:2.3:a:cacti:cacti::::::::

References

bugs.gentoo.org/show_bug.cgi?id=199509

secunia.com/advisories/27719

secunia.com/advisories/27745

secunia.com/advisories/27756

secunia.com/advisories/27891

secunia.com/advisories/27950

security.gentoo.org/glsa/glsa-200712-02.xml

www.cacti.net/release_notes_0_8_7a.php

www.debian.org/security/2007/dsa-1418

www.mandriva.com/security/advisories?name=MDKSA-2007:231

www.novell.com/linux/security/advisories/2007_24_sr.html

www.securityfocus.com/bid/26487

www.securitytracker.com/id?1018982

www.vupen.com/english/advisories/2007/3911

exchange.xforce.ibmcloud.com/vulnerabilities/38559

www.redhat.com/archives/fedora-package-announce/2007-November/msg00794.html

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.011

Percentile

85.0%

JSON

Related for CVE-2007-6035