CVE-2015-8377: SQL Injection
Published Dec 15, 2015
·Updated
SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted serialized data in the selectedgraphsarray parameter in a save action.
Affected Software
1 affected component
Cacti Cacti<=0.8.8f
Event History
Dec 15, 2015
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8377?
CVE-2015-8377 is considered a high severity vulnerability due to the potential for remote authenticated users to execute arbitrary SQL commands.
2
How do I fix CVE-2015-8377?
To fix CVE-2015-8377, update your Cacti installation to version 0.8.8g or later.
3
Who is affected by CVE-2015-8377?
CVE-2015-8377 affects users of Cacti version 0.8.8f and earlier.
4
What type of vulnerability is CVE-2015-8377?
CVE-2015-8377 is an SQL injection vulnerability.
5
Can CVE-2015-8377 be exploited remotely?
Yes, CVE-2015-8377 can be exploited remotely by authenticated users.