GCVE-VVD-MAGEIA-2015-306 — Vulnetix

GCVE-VVD-MAGEIA-2015-306

Advisory Published

Vulnetix · Advisory published August 10, 2015

Cross-site scripting (XSS) vulnerability in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors (CVE-2015-2665). SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id (CVE-2015-4342). SQL injection vulnerability in the get_hash_graph_template function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via the graph_template_id parameter to graph_templates.php (CVE-2015-4454). SQL injection vulnerability in Cacti before 0.8.8e in graphs.php (CVE-2015-4634). The cacti package has been updated to version 0.8.8e, which fixes this issue, as well as other SQL injection and XSS issues and other bugs

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	cacti	0 (affected), 0.8.8f-1.mga4 (unaffected)	—
Mageia	cacti	0 (affected), 0.8.8f-1.mga5 (unaffected)	—

Aliases

CVE-2015-4634 CVE-2015-2665 CVE-2015-4342 CVE-2015-4454

Transitive aliases

CNVD-2015-03938 CVE-2013-5589 CVE-2015-8604 GSD-2014-5262 CVE-2014-5026 CNVD-2016-02215 GHSA-fwvm-rfh8-pm9x EUVD-2015-4653 GHSA-fc89-v9fm-mhcc CVE-2014-5261 OPENSUSE-SU-2024:10084-1 CVE-2014-2327 CVE-2016-3659 EUVD-2014-2736 EUVD-2013-5429 GSD-2016-3172 GHSA-v774-w7w7-mvrg CVE-2014-2326 GHSA-v7rc-xv6x-99vc VVD-GENTOO-2014-506356 GHSA-33xj-hh55-6653 GSD-2016-3659 EUVD-2016-4684 GHSA-f4fj-5r86-7vv3 VVD-GENTOO-2015-554816 GHSA-3pph-g5w6-c57w BDU:2016-01051 EUVD-2014-2365 VVD-GENTOO-2014-519900 CVE-2013-5588 CVE-2016-2313 VVD-GENTOO-2014-515108 VVD-MAGEIA-2014-403 GHSA-hqj3-mvg5-35g5 EUVD-2014-2363 GHSA-4frf-q9p9-gg69 GHSA-pf2x-7333-7fw9 GHSA-g258-xc2f-gxcj CVE-2015-8377 EUVD-2014-4924 VVD-MAGEIA-2016-25 GHSA-fwg6-8jf8-3wh3 GHSA-gpvp-6xwc-m44g EUVD-2015-8482 EUVD-2014-5155 CNVD-2015-03939 CNVD-2015-03937 CVE-2014-4002 CVE-2014-2708 CVE-2014-2709 VVD-MAGEIA-2016-178 EUVD-2014-4925 VVD-MAGEIA-2016-68 GSD-2015-4454 CNVD-2016-02028 EUVD-2014-2737 EUVD-2016-3397 VVD-GENTOO-2016-570984 EUVD-2014-5154 EUVD-2014-2364 GHSA-5r75-j6jg-x3cp GHSA-h375-wfx8-8qcx EUVD-2015-2757 GHSA-8975-c5xr-xccw EUVD-2016-4214 VVD-GENTOO-2015-551728 GHSA-j268-9gfj-xh5m CVE-2014-5025 CVE-2016-3172 VVD-MAGEIA-2014-302 GHSA-jhrc-rcvv-9rpc EUVD-2015-8253 VVD-GENTOO-2016-582996 CVE-2014-2328 VVD-GENTOO-2013-482424 GHSA-6mcp-hm3f-5j68 EUVD-2013-5428 GHSA-qw2x-4966-p858 EUVD-2015-4474 GSD-2015-2665 EUVD-2014-3934 GHSA-w6fq-c949-4cc3 GHSA-gfqc-77c8-mw92 EUVD-2015-8260 CVE-2014-5262 EUVD-2015-4365 CVE-2015-8369 VVD-GENTOO-2015-568400 GSD-2014-5261

References

Updated cacti package fixes security vulnerability

advisory

Updated cacti package fixes security vulnerability

issue

Updated cacti package fixes security vulnerability

issue

Updated cacti package fixes security vulnerability

issue

Updated cacti package fixes security vulnerability

issue

Updated cacti package fixes security vulnerability

advisory

Browse GCVE Records

73,040 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON

$ Console Community · 100/wk Open console ›