CVE-2015-0916: SQL Injection
Published May 22, 2015
·Updated
SQL injection vulnerability in graph.php in Cacti before 0.8.6f allows remote authenticated users to execute arbitrary SQL commands via the localgraphid parameter, a different vulnerability than CVE-2007-6035.
Affected Software
1 affected component
Cacti Cacti<=0.8.6e
Remediation
Patch Available
Event History
May 22, 2015
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-0916?
CVE-2015-0916 is classified as a medium severity vulnerability due to its potential for SQL injection leading to unauthorized data access.
2
How do I fix CVE-2015-0916?
To fix CVE-2015-0916, upgrade Cacti to version 0.8.6f or later, which addresses this vulnerability.
3
Who is affected by CVE-2015-0916?
CVE-2015-0916 affects users of Cacti versions prior to 0.8.6f who have authenticated access.
4
What type of vulnerability is CVE-2015-0916?
CVE-2015-0916 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.
5
Can CVE-2015-0916 be exploited remotely?
Yes, CVE-2015-0916 can be exploited by remote authenticated users to execute arbitrary SQL commands.