Published: 20/10/2014 Updated: 30/10/2018

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Various cross-site scripting (XSS) flaws (CVE-2013-5588, CVE-2014-5025, CVE-2014-5026) and various SQL injection flaws (CVE-2013-5589, CVE-2015-4342, CVE-2015-4634, CVE-2015-8377, CVE-2015-8604) were discovered affecting versions of Cacti prior to 0.8.8g. Cross-site scripting (XSS) vulnerability in Cacti prior to 0.8.8d allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors. (CVE-2015-2665) SQL injection vulnerability in the get_hash_graph_template function in lib/functions.php in Cacti prior to 0.8.8d allows remote malicious users to execute arbitrary SQL commands via the graph_template_id parameter to graph_templates.php. (CVE-2015-4454)

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian debian linux 7.0
opensuse opensuse 13.1
opensuse opensuse 13.2
cacti cacti 0.8.8b

Multiple security issues (cross-site scripting, missing input sanitising and SQL injection) have been discovered in Cacti, a web interface for graphing of monitoring systems For the stable distribution (wheezy), these problems have been fixed in version 088a+dfsg-5+deb7u4 For the unstable distribution (sid), these problems have been fixed in ve ...

Various cross-site scripting (XSS) flaws (CVE-2013-5588, CVE-2014-5025, CVE-2014-5026) and various SQL injection flaws (CVE-2013-5589, CVE-2015-4342, CVE-2015-4634, CVE-2015-8377, CVE-2015-8604) were discovered affecting versions of Cacti prior to 088g Cross-site scripting (XSS) vulnerability in Cacti before 088d allows remote attackers to inj ...

CWE-79 http://bugs.cacti.net/view.php?id=2456 http://www.openwall.com/lists/oss-security/2014/07/22/9 http://www.securityfocus.com/bid/68759 http://www.debian.org/security/2014/dsa-3007 http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.html https://security.gentoo.org/glsa/201509-03 https://exchange.xforce.ibmcloud.com/vulnerabilities/94814 https://nvd.nist.gov https://www.debian.org/security/./dsa-3007 https://alas.aws.amazon.com/ALAS-2016-673.html

CVE-2014-5025

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect