tocsin

Debian/cacti: unknown

SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a val

Action: Upgrade cacti to 0.8.7e-4 or later.

Affected

introducedfixedlast affected
00.8.7e-4-

Fixed versions

0.8.7e-4

Sources

published · modified · JSON