Published: 15/12/2011 Updated: 29/08/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in auth_login.php in Cacti prior to 0.8.7h allows remote malicious users to execute arbitrary SQL commands via the login_username parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cacti cacti 0.8.7e
cacti cacti 0.8.7
cacti cacti 0.8.6c
cacti cacti 0.8.6h
cacti cacti 0.8.3a
cacti cacti 0.8.7d
cacti cacti 0.6.8a
cacti cacti 0.6.8
cacti cacti 0.6.3
cacti cacti 0.8
cacti cacti 0.8.6b
cacti cacti 0.8.5
cacti cacti 0.8.2a
cacti cacti 0.8.7b
cacti cacti 0.5
cacti cacti 0.8.6j
cacti cacti 0.8.1
cacti cacti 0.6.5
cacti cacti 0.8.6f
cacti cacti 0.8.6d
cacti cacti 0.8.6g
cacti cacti 0.8.4
cacti cacti 0.8.7c
cacti cacti 0.8.6
cacti cacti 0.8.7a
cacti cacti 0.8.2
cacti cacti 0.6.4
cacti cacti 0.6.7
cacti cacti 0.8.6a
cacti cacti 0.8.5a
cacti cacti 0.8.3
cacti cacti 0.8.6k
cacti cacti 0.6.1
cacti cacti 0.6
cacti cacti 0.8.6i
cacti cacti 0.6.6
cacti cacti 0.6.2
cacti cacti

Debian Bug report logs - #652371 [CVE-2011-4824] SQL injection issue in auth_loginphp Package: cacti; Maintainer for cacti is Cacti Maintainer <pkg-cacti-maint@listsaliothdebianorg>; Source for cacti is src:cacti (PTS, buildd, popcon) Reported by: Florian Weimer <fw@denebenyode> Date: Fri, 16 Dec 2011 20:09:02 ...

Several vulnerabilities have been discovered in Cacti, a graphing tool for monitoring data Multiple cross site scripting issues allow remote attackers to inject arbitrary web script or HTML An SQL injection vulnerability allows remote attackers to execute arbitrary SQL commands For the oldstable distribution (lenny), this problem has been fixed ...

CWE-89 http://secunia.com/advisories/44133 http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069126.html http://www.securityfocus.com/bid/50671 http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069137.html http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069141.html http://svn.cacti.net/viewvc?view=rev&revision=6807 http://secunia.com/advisories/46876 http://www.cacti.net/release_notes_0_8_7h.php http://bugs.cacti.net/view.php?id=2062 http://forums.cacti.net/viewtopic.php?f=21&t=44116 https://exchange.xforce.ibmcloud.com/vulnerabilities/71326 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652371 https://www.debian.org/security/./dsa-2384 https://nvd.nist.gov

CVE-2011-4824

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect