CVE-2015-4634: SQL Injection
Published Aug 11, 2015
·Updated
SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter.
Affected Software
1 affected component
Cacti Cacti<=0.8.8d
Event History
Aug 11, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4634?
CVE-2015-4634 has a medium severity rating due to the potential for remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2015-4634?
To fix CVE-2015-4634, upgrade Cacti to version 0.8.8e or later, which includes patches for this vulnerability.
3
What software is affected by CVE-2015-4634?
CVE-2015-4634 affects Cacti versions before 0.8.8e, specifically up to and including 0.8.8d.
4
What are the potential impacts of CVE-2015-4634?
The potential impacts of CVE-2015-4634 include unauthorized data access and manipulation through SQL injection.
5
Can CVE-2015-4634 be exploited remotely?
Yes, CVE-2015-4634 can be exploited remotely if an attacker manipulates the local_graph_id parameter.