cacti: two vulnerabilities
| Package(s): | cacti | CVE #(s): | CVE-2015-2665 CVE-2015-4454 | ||||||||||||||||||||
| Created: | June 25, 2015 | Updated: | July 1, 2015 | ||||||||||||||||||||
| Description: | From the Red Hat bugzilla entries:
CVE-2015-2665: Cross-site scripting (XSS) vulnerability in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CVE-2015-4454: SQL injection vulnerability in the get_hash_graph_template function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via the graph_template_id parameter to graph_templates.php. | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||