Lucene search
MitreCVELIST:CVE-2010-2092HistoryMay 27, 2010 - 10:00 p.m.
CVE-2010-2092
2010-05-2722:00:00
mitre
www.cve.org
1
SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a valid rra_id value in a POST request or a cookie, which causes the POST or cookie value to bypass the validation routine, but inserts the $_GET value into the resulting query.
Related
nessus
nessus
Debian DSA-2060-1 : cacti - insufficient input sanitization
2010-06-14 00:00:00
Cacti < 0.8.7f Multiple Input Validation Vulnerabilities
2010-05-04 00:00:00
GLSA-201401-20 : Cacti: Multiple vulnerabilities
2014-01-22 00:00:00
ubuntucve
ubuntucve
CVE-2010-2092
2010-05-27 00:00:00
openvas
openvas
Cacti 'rra_id' Parameter SQL Injection Vulnerability
2010-05-14 00:00:00
Mandriva Update for flashplayer MDVA-2010:117 (flashplayer)
2010-04-16 00:00:00
Debian: Security Advisory (DSA-2060-1)
2010-07-06 00:00:00
cve
cve
CVE-2010-2092
2010-05-27 22:30:01
securityvulns
securityvulns
[SECURITY] [DSA 2060-1] New cacti packages fix SQL injection
2010-06-17 00:00:00
prion
prion
Sql injection
2010-05-27 22:30:00
nvd
nvd
CVE-2010-2092
2010-05-27 22:30:01
debiancve
debiancve
CVE-2010-2092
2010-05-27 22:30:01
veracode
veracode
SQL Injection
2020-04-10 00:46:59
debian
debian
[SECURITY] [DSA 2060-1] New cacti packages fix SQL injection
2010-06-13 15:27:18
osv
osv
cacti - SQL injection
2010-06-13 00:00:00
gentoo
gentoo
Cacti: Multiple vulnerabilities
2014-01-21 00:00:00