CVE-2014-5262

High

Published: 22/08/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

CVE-2014-5262 is a SQL injection vulnerability in the graph settings script (graph_settings.php) in Cacti versions 0.8.8b and earlier. It allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Risk Assessment

Attackers can exploit this vulnerability to gain access to the database, potentially leading to data theft or system compromise.

Recommendation

It is recommended to update Cacti to the latest version to eliminate this vulnerability and to review and secure scripts against potential SQL injection attacks.

Other vulnerabilities in Cacti 0.8.8b i wcześniejsze

CVE-2014-5261High
The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related to the rrdtool commandline in lib/rrd.php.

Original NVD description (English source)

SQL injection vulnerability in the graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.