CVE-2015-8604: SQL Injection
Published Apr 11, 2016
·Updated
SQL injection vulnerability in the hostnewgraphs function in graphsnew.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via the cgg parameter in a save action.
Affected Software
1 affected component
Cacti Cacti<=0.8.8f
Event History
Apr 11, 2016
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8604?
CVE-2015-8604 is rated as a high severity vulnerability due to its potential for remote execution of arbitrary SQL commands.
2
How do I fix CVE-2015-8604?
To fix CVE-2015-8604, upgrade Cacti to version 0.8.8g or later, which addresses this SQL injection vulnerability.
3
Who is impacted by CVE-2015-8604?
CVE-2015-8604 affects remote authenticated users of Cacti versions 0.8.8f and earlier.
4
What type of vulnerability is CVE-2015-8604?
CVE-2015-8604 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.
5
What is the affected software for CVE-2015-8604?
The affected software for CVE-2015-8604 is Cacti version 0.8.8f and earlier.