Lucene search
Veracode Vulnerability DatabaseVERACODE:24132HistoryApr 10, 2020 - 12:46 a.m.
SQL Injection
2020-04-1000:46:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.002 Low
EPSS
Percentile
59.9%
cacti is vulnerable to SQL injection. Multiple SQL injection flaws were discovered in Cacti. An unauthenticated, or authenticated user with certain administrative privileges, could use these flaws to execute arbitrary SQL queries.
| CPE | Name | Operator | Version |
|---|---|---|---|
| python-psycopg2 | eq | 2.0.6__1.el5ipa | |
| python-psycopg2 | eq | 2.0.6__1.el5ipa |
References
php-security.org/2010/05/13/mops-2010-023-cacti-graph-viewer-sql-injection-vulnerability/index.html
secunia.com/advisories/41041
www.cacti.net/changelog.php
www.debian.org/security/2010/dsa-2060
www.redhat.com/security/updates/classification/#important
www.vupen.com/english/advisories/2010/2132
access.redhat.com/errata/RHSA-2010:0635
rhn.redhat.com/errata/RHSA-2010-0635.html
Related
nessus
nessus
Debian DSA-2060-1 : cacti - insufficient input sanitization
2010-06-14 00:00:00
Cacti < 0.8.7f Multiple Input Validation Vulnerabilities
2010-05-04 00:00:00
GLSA-201401-20 : Cacti: Multiple vulnerabilities
2014-01-22 00:00:00
ubuntucve
ubuntucve
CVE-2010-2092
2010-05-27 00:00:00
cve
cve
CVE-2010-2092
2010-05-27 22:30:01
openvas
openvas
Mandriva Update for flashplayer MDVA-2010:117 (flashplayer)
2010-04-16 00:00:00
Debian: Security Advisory (DSA-2060-1)
2010-07-06 00:00:00
Cacti 'rra_id' Parameter SQL Injection Vulnerability
2010-05-14 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2060-1] New cacti packages fix SQL injection
2010-06-17 00:00:00
prion
prion
Sql injection
2010-05-27 22:30:00
nvd
nvd
CVE-2010-2092
2010-05-27 22:30:01
debiancve
debiancve
CVE-2010-2092
2010-05-27 22:30:01
cvelist
cvelist
CVE-2010-2092
2010-05-27 22:00:00
debian
debian
[SECURITY] [DSA 2060-1] New cacti packages fix SQL injection
2010-06-13 15:27:18
osv
osv
cacti - SQL injection
2010-06-13 00:00:00
gentoo
gentoo
Cacti: Multiple vulnerabilities
2014-01-21 00:00:00