CVE-2011-4824: SQL Injection
Published Dec 15, 2011
·Updated
SQL injection vulnerability in authlogin.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL commands via the loginusername parameter.
Affected Software
38 affected components
Cacti Cacti=0.5
Cacti Cacti=0.8.6k
Cacti Cacti=0.8.6d
Cacti Cacti=0.6.3
Cacti Cacti=0.8.7
Cacti Cacti=0.8.5a
Cacti Cacti=0.8.3
Cacti Cacti=0.6.8
Cacti Cacti=0.8.2
Cacti Cacti=0.8.5
Cacti Cacti=0.6.6
Cacti Cacti=0.8.7d
Cacti Cacti=0.8.7b
Cacti Cacti=0.8.7a
Cacti Cacti=0.6.2
Cacti Cacti=0.6.5
Cacti Cacti=0.8.6f
Cacti Cacti=0.8.6g
Cacti Cacti=0.8.6j
Cacti Cacti=0.8.7c
Cacti Cacti=0.6.1
Cacti Cacti=0.8
Cacti Cacti<=0.8.7g
Cacti Cacti=0.8.7e
Cacti Cacti=0.8.6a
Cacti Cacti=0.8.6i
Cacti Cacti=0.8.6
Cacti Cacti=0.6.8a
Cacti Cacti=0.6.7
Cacti Cacti=0.8.1
Cacti Cacti=0.8.4
Cacti Cacti=0.8.6c
Cacti Cacti=0.6.4
Cacti Cacti=0.8.6b
Cacti Cacti=0.8.2a
Cacti Cacti=0.8.3a
Cacti Cacti=0.8.6h
Cacti Cacti=0.6
Event History
Dec 15, 2011
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID CVE-2011-4824 about?
CVE-2011-4824 describes an SQL injection vulnerability in auth_login.php in Cacti versions before 0.8.7h that allows remote attackers to execute arbitrary SQL commands via the login_username parameter.
2
What are the affected versions for CVE-2011-4824?
CVE-2011-4824 affects Cacti versions including 0.5, 0.8.0 - 0.8.7g before the fix was applied.
3
How do I fix CVE-2011-4824?
To fix CVE-2011-4824, upgrade Cacti to version 0.8.7h or later.
4
What type of attack does CVE-2011-4824 allow?
CVE-2011-4824 allows attackers to perform SQL injection attacks.
5
What is the significance of CVE-2011-4824?
The significance of CVE-2011-4824 lies in its potential to compromise the database integrity by executing arbitrary SQL commands.