CVE-2014-5262

SQL injection vulnerability in the graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

Alt Linux, Cacti

Cacti

≤ 0.8.8b, 0.8.6e, 0.8.7, 0.8.7a, 0.8.7b, 0.8.7c, 0.8.7d, 0.8.7e, 0.8.7f, 0.8.7g, 0.8.7i, 0.8.8, 0.8.8a

CVSS 2.0

7.5 HIGH

EPSS

2.3% (82th percentile)

Weakness

CWE-89

NVD status

Modified

Published

2014-08-22