CVE-2015-8369

High

Published: 17/12/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2015-8369 is an SQL injection vulnerability in include/top_graph_header.php in Cacti version 0.8.8f and earlier. It allows remote attackers to execute arbitrary SQL commands via the rra_id parameter in a properties action to graph.php.

Risk Assessment

This vulnerability could lead to unauthorized access to the database, potentially resulting in the exposure of sensitive information or data modification. Organizations should be aware of the potential consequences related to data security.

Recommendation

It is recommended to update Cacti to the latest version to eliminate this vulnerability. Additionally, implementing input validation measures can help minimize the risk of SQL injection attacks.

Other vulnerabilities in Cacti 0.8.8f i wcześniejsze

CVE-2015-8604High
The host_new_graphs function in graphs_new.php in Cacti 0.8.8f and earlier has an SQL injection vulnerability that allows remote authenticated users to execute arbitrary SQL commands via the cg_g parameter in a save action.

Original NVD description (English source)

SQL injection vulnerability in include/top_graph_header.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rra_id parameter in a properties action to graph.php.