Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:cacti:cacti:1.2.28:*:*:*:*:*:*:*
Informations
Vendor
cactiProduct
cactiVersion
1.2.28Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Cacti is an open source performance and fault management framework. Some of the data stored in automation_tree_rules.php is not thoroughly checked and is used to concatenate the SQL statement in build_rule_item_filter() function from lib/api_automation.php, resulting in SQL injection. This vulnerability is fixed in 1.2.29. | 6.9 |
Moyen |
||
| Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed in 1.2.29. | 8.7 |
Haute |
