CVE-2014-5262: SQL Injection
Published Aug 22, 2014
·Updated
SQL injection vulnerability in the graph settings script (graphsettings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
13 affected components
Cacti Cacti<=0.8.8b
Cacti Cacti=0.8.6e
Cacti Cacti=0.8.7
Cacti Cacti=0.8.7a
Cacti Cacti=0.8.7b
Cacti Cacti=0.8.7c
Cacti Cacti=0.8.7d
Cacti Cacti=0.8.7e
Cacti Cacti=0.8.7f
Cacti Cacti=0.8.7g
Cacti Cacti=0.8.7i
Cacti Cacti=0.8.8
Cacti Cacti=0.8.8a
Remediation
Patch Available
Event History
Aug 22, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-5262?
CVE-2014-5262 has a medium severity rating due to its potential to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2014-5262?
To fix CVE-2014-5262, you should upgrade to a version of Cacti later than 0.8.8b.
3
What versions of Cacti are affected by CVE-2014-5262?
CVE-2014-5262 affects Cacti versions 0.8.8b and earlier, including versions 0.8.6e to 0.8.8a.
4
What type of vulnerability is CVE-2014-5262?
CVE-2014-5262 is an SQL injection vulnerability that allows attackers to manipulate SQL queries.
5
Can CVE-2014-5262 lead to data breaches?
Yes, CVE-2014-5262 can lead to data breaches as it allows attackers to execute arbitrary SQL commands, potentially accessing sensitive data.