SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.

Various cross-site scripting (XSS) flaws (CVE-2013-5588 , CVE-2014-5025 , CVE-2014-5026) and various SQL injection flaws (CVE-2013-5589 , CVE-2015-4342 , CVE-2015-4634 , CVE-2015-8377 , CVE-2015-8604) were discovered affecting versions of Cacti prior to 0.8.8g.

Cross-site scripting (XSS) vulnerability in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. (CVE-2015-2665)

SQL injection vulnerability in the get_hash_graph_template function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via the graph_template_id parameter to graph_templates.php. (CVE-2015-4454)

Cacti was updated to 0.8.8e to fix several security issues.

The following vulnerabilities were fixed :

  - Multiple XSS and SQL injection vulnerabilities     [boo#937997]

  - CVE-2015-4634: SQL injection in graphs.php [boo#937997]

In addition, this update contains upstream bug fixes.

Multiple SQL injection vulnerabilities were discovered in cacti, a web interface for graphing of monitoring systems.

The Cacti Group, Inc. reports :

Important Security Fixes

- Multiple XSS and SQL injection vulnerabilities

- CVE-2015-4634 - SQL injection in graphs.php

Changelog

- bug: Fixed various SQL Injection vectors

- bug#0002574: SQL Injection Vulnerabilities in graph items and graph template items

- bug#0002577: CVE-2015-4634 - SQL injection in graphs.php

- bug#0002579: SQL Injection Vulnerabilities in data sources

- bug#0002580: SQL Injection in cdef.php

- bug#0002582: SQL Injection in data_templates.php

- bug#0002583: SQL Injection in graph_templates.php

- bug#0002584: SQL Injection in host_templates.php

ID	Name	Product	Family	Severity
90155	Amazon Linux AMI : cacti (ALAS-2016-673)	Nessus	Amazon Linux Local Security Checks	high
85000	openSUSE Security Update : cacti (openSUSE-2015-510)	Nessus	SuSE Local Security Checks	high
84933	Debian DSA-3312-1 : cacti - security update	Nessus	Debian Local Security Checks	high
84886	FreeBSD : cacti -- Multiple XSS and SQL injection vulnerabilities (0bfda05f-2e6f-11e5-a4a5-002590263bf5)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2015-4634

critical

Tenable Plugins

high

high

high

high