| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-2709 | 7.5 |
lib/rrd.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified parameters. Per: https://cwe.mitre.org/data/definitions/77.html
"CWE-77: Improper Neutralization of Specia
|
13-12-2018 - 18:22 | 23-04-2014 - 15:55 | |
| CVE-2014-2328 | 6.5 |
lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors. Per: https://cwe.mitre.org/data/definitions/77.html
"CWE-77: Improper Neutrali
|
13-12-2018 - 18:22 | 23-04-2014 - 15:55 | |
| CVE-2014-2326 | 4.3 |
Cross-site scripting (XSS) vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
30-10-2018 - 16:27 | 27-03-2014 - 16:55 | |
| CVE-2014-2708 | 7.5 |
Multiple SQL injection vulnerabilities in graph_xport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers to execute arbitrary SQL commands via the (1) graph_start, (2) graph_end, (3) graph_height, (4) graph_width, (5) graph_nolegend, (6)
|
29-08-2017 - 01:34 | 10-04-2014 - 20:29 |