GCVE-110-MAGEIA-2016-25

Advisory Published

Vulnetix · Advisory published January 20, 2016

Several SQL injection vulnerabilities have been discovered in Cacti. Specially crafted input can be used by an attacker in the rra_id value of the graph.php script to execute arbitrary SQL commands on the database (CVE-2015-8369).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	latex2rtf	0 (affected), 2.3.8-3.2.mga5 (unaffected)	—
Mageia	cacti	0 (affected), 0.8.8f-1.2.mga5 (unaffected), 0 (affected), * (unaffected)	—

Aliases

CVE-2015-8369

References

Updated cacti packages fix security vulnerability

advisory

Updated cacti packages fix security vulnerability

advisory

Updated cacti packages fix security vulnerability

issue

Updated cacti packages fix security vulnerability

issue

Updated cacti packages fix security vulnerability

issue

Updated latex2rtf packages fix config path

advisory

Updated latex2rtf packages fix config path

issue

Browse GCVE Records

73,280 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON