Cacti Graph.PHP SQL Injection Vulnerability
BID:26487
Info
Cacti Graph.PHP SQL Injection Vulnerability
| Bugtraq ID: | 26487 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-6035 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 17 2007 12:00AM |
| Updated: | Dec 18 2007 08:04PM |
| Credit: | The vendor reported this vulnerability. |
| Vulnerable: |
SuSE Linux 10.3 SuSE Linux 10.2 SuSE Linux 10.1 SuSE Linux 10.0 Redhat Fedora 7 Planet Technology WSW-2401 0.8.6 h Planet Technology WSW-2401 0.8.6 g MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Cacti Cacti 0.8.7 Cacti Cacti 0.8.6 f Cacti Cacti 0.8.6 c Cacti Cacti 0.8.5 a Cacti Cacti 0.8.5 Cacti Cacti 0.8.4 Cacti Cacti 0.8.3 a Cacti Cacti 0.8.3 Cacti Cacti 0.8.2 a Cacti Cacti 0.8.2 Cacti Cacti 0.8.1 Cacti Cacti 0.8 Cacti Cacti 0.8.6j Cacti Cacti 0.8.6i |
| Not Vulnerable: |
Cacti Cacti 0.8.7a |
Discussion
Cacti Graph.PHP SQL Injection Vulnerability
Cacti is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Cacti 0.8.7 and prior versions are vulnerable.
Cacti is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Cacti 0.8.7 and prior versions are vulnerable.
Exploit / POC
Cacti Graph.PHP SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
Cacti Graph.PHP SQL Injection Vulnerability
Solution:
Please see the referenced advisories for more information.
Cacti Cacti 0.8.6j
Cacti Cacti 0.8.6i
Cacti Cacti 0.8
Cacti Cacti 0.8.1
Cacti Cacti 0.8.2 a
Cacti Cacti 0.8.2
Cacti Cacti 0.8.3
Cacti Cacti 0.8.3 a
Cacti Cacti 0.8.4
Cacti Cacti 0.8.5
Cacti Cacti 0.8.5 a
Planet Technology WSW-2401 0.8.6 g
Cacti Cacti 0.8.6 f
Cacti Cacti 0.8.6 c
Planet Technology WSW-2401 0.8.6 h
Cacti Cacti 0.8.7
Solution:
Please see the referenced advisories for more information.
Cacti Cacti 0.8.6j
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
Cacti Cacti 0.8.6i
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
Cacti Cacti 0.8
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
Cacti Cacti 0.8.1
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
Cacti Cacti 0.8.2 a
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
Cacti Cacti 0.8.2
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
Cacti Cacti 0.8.3
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
Cacti Cacti 0.8.3 a
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
Cacti Cacti 0.8.4
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
Cacti Cacti 0.8.5
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
Cacti Cacti 0.8.5 a
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
Planet Technology WSW-2401 0.8.6 g
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
Cacti Cacti 0.8.6 f
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
Cacti Cacti 0.8.6 c
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
Planet Technology WSW-2401 0.8.6 h
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
Cacti Cacti 0.8.7
-
Cacti Cacti 0.8.7a
http://www.cacti.net/download_cacti.php
References
Cacti Graph.PHP SQL Injection Vulnerability
References:
References:
- Cacti Homepage (Cacti)
- Release Notes - 0.8.7a (Cacti)