NVD

Id
31065  
Name
CVE-2014-2708  
Description
Multiple SQL injection vulnerabilities in graph_xport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers to execute arbitrary SQL commands via the (1) graph_start, (2) graph_end, (3) graph_height, (4) graph_width, (5) graph_nolegend, (6) print_source, (7) local_graph_id, or (8) rra_id parameter.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-04-10  
Modified Date
2016-12-21  
Seq
2014-2708  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
163198 31065 CVE-2014-2708 http://bugs.cacti.net/view.php?id=2405  View
163199 31065 CVE-2014-2708 FEDORA-2014-4928  View
163200 31065 CVE-2014-2708 FEDORA-2014-4892  View
163201 31065 CVE-2014-2708 [oss-security] 20140403 Re: CVE request: cacti "bug#0002405: SQL injection in graph_xport.php"  View
163202 31065 CVE-2014-2708 [oss-security] 20140401 CVE request: cacti "bug#0002405: SQL injection in graph_xport.php"  View
163203 31065 CVE-2014-2708 http://svn.cacti.net/viewvc?view=rev&revision=7439  View
163204 31065 CVE-2014-2708 DSA-2970  View
163205 31065 CVE-2014-2708 66555  View
163206 31065 CVE-2014-2708 cacti-cve20142708-sql-injection(92278)  View
163207 31065 CVE-2014-2708 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742768  View
163208 31065 CVE-2014-2708 https://bugzilla.redhat.com/show_bug.cgi?id=1084258  View
163209 31065 CVE-2014-2708 GLSA-201509-03  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13093 JVNDB-2014-001968 Cacti の graph_xport.php における SQL インジェクションの脆弱性 Cacti の graph_xport.php には、SQL インジェクションの脆弱性が存在します。 CVE-2014-2708 69995 CVE-2014-2708 31065 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001968.html 2014-03-30 2014-05-19 View