Lucene search
PRIOn knowledge basePRION:CVE-2015-8604HistoryApr 11, 2016 - 9:59 p.m.
Sql injection
2016-04-1121:59:00
PRIOn knowledge base
www.prio-n.com
2
SQL injection vulnerability in the host_new_graphs function in graphs_new.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via the cg_g parameter in a save action.
References
bugs.cacti.net/view.php?id=2652
packetstormsecurity.com/files/135191/Cacti-0.8.8f-graphs_new.php-SQL-Injection.html
seclists.org/fulldisclosure/2016/Jan/16
www.debian.org/security/2016/dsa-3494
www.openwall.com/lists/oss-security/2016/01/04/8
www.openwall.com/lists/oss-security/2016/01/04/9
www.securitytracker.com/id/1034573
security.gentoo.org/glsa/201607-05
Related
packetstorm
packetstorm
Cacti 0.8.8f graphs_new.php SQL Injection
2016-01-09 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-386-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-3494-1)
2016-03-08 00:00:00
Debian Security Advisory DSA 3494-1 (cacti - security update)
2016-03-08 00:00:00
nvd
nvd
CVE-2015-8604
2016-04-11 21:59:12
cve
cve
CVE-2015-8604
2016-04-11 21:59:12
debiancve
debiancve
CVE-2015-8604
2016-04-11 21:59:12
debian
debian
[SECURITY] [DLA 386-1] cacti security update
2016-01-14 11:04:52
[SECURITY] [DSA 3494-1] cacti security update
2016-02-27 20:13:03
[SECURITY] [DSA 3494-1] cacti security update
2016-02-27 20:13:03
nessus
nessus
Debian DLA-386-1 : cacti security update
2016-01-15 00:00:00
Debian DSA-3494-1 : cacti - security update
2016-02-29 00:00:00
osv
osv
cacti - security update
2016-01-14 00:00:00
cvelist
cvelist
CVE-2015-8604
2016-04-11 21:00:00
ubuntucve
ubuntucve
CVE-2015-8604
2016-04-11 00:00:00
mageia
mageia
Updated cacti packages fix security vulnerability
2016-01-20 20:53:26
freebsd
freebsd
cacti -- multiple vulnerabilities
2016-02-21 00:00:00
archlinux
archlinux
cacti: sql injection
2016-02-28 00:00:00
gentoo
gentoo
Cacti: Multiple vulnerabilities
2016-07-16 00:00:00
amazon
amazon
Medium: cacti
2016-03-24 12:00:00