- Home
- CVEs with nessus.description==According to its self-reported version number, the Cacti application running on the remote web server is prior to version 0.8.8d. It is, therefore, potentially affected by multiple vulnerabilities :
- A stored cross-site scripting vulnerability exists due to improper validation of user-supplied input in graphs.php. A remote attacker can exploit this to inject arbitrary web script or HTML. (CVE-2015-2665)
- A SQL injection vulnerability exists due to improper validation of user-supplied input to the 'cdef' parameter in cdef.php. A remote attacker can exploit this to execute arbitrary SQL commands. (CVE-2015-4342)
- A SQL injection vulnerability exists due to improper validation of user-supplied input to the 'graph_template_id' parameter in graph_templates.php. A remote attacker can exploit this to execute arbitrary SQL commands. (CVE-2015-4454)
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top