UBUNTU-CVE-2014-2708

See a problem?

Source

https://ubuntu.com/security/CVE-2014-2708

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-2708.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2014-2708

Related

CVE-2014-2708

Published

2014-04-10T20:29:00Z

Modified

2014-04-10T20:29:00Z

Summary

[none]

Details

Multiple SQL injection vulnerabilities in graphxport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers to execute arbitrary SQL commands via the (1) graphstart, (2) graphend, (3) graphheight, (4) graphwidth, (5) graphnolegend, (6) printsource, (7) localgraphid, or (8) rraid parameter.

References

Affected packages

Ubuntu:14.04:LTS / cacti

Package

Name: cacti
Purl: pkg:deb/ubuntu/cacti?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.8.8b+dfsg-5

Affected versions

0.*

0.8.8b+dfsg-3

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "0.8.8b+dfsg-5",
            "binary_name": "cacti"
        }
    ]
}