CVE-2007-6035: SQL Injection
Published Nov 20, 2007
·Updated
SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter.
Affected Software
1 affected component
Cacti Cacti<=0.8.7
Remediation
Patch Available
Patch Available
Event History
Nov 20, 2007
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-6035?
CVE-2007-6035 has a moderate severity level as it allows remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2007-6035?
To fix CVE-2007-6035, you should upgrade to Cacti version 0.8.7a or later.
3
What software is affected by CVE-2007-6035?
CVE-2007-6035 affects Cacti versions prior to 0.8.7a.
4
What type of vulnerability is CVE-2007-6035?
CVE-2007-6035 is an SQL injection vulnerability.
5
Can CVE-2007-6035 be exploited remotely?
Yes, CVE-2007-6035 can be exploited remotely by attackers.