Lucene search

K
prionPRIOn knowledge basePRION:CVE-2010-2092
HistoryMay 27, 2010 - 10:30 p.m.

Sql injection

2010-05-2722:30:00
PRIOn knowledge base
www.prio-n.com
2

8.7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.9%

SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a valid rra_id value in a POST request or a cookie, which causes the POST or cookie value to bypass the validation routine, but inserts the $_GET value into the resulting query.

Rows per page:
1-10 of 371

8.7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.9%