FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

cacti -- Multiple XSS and SQL injection vulnerabilities

Affected packages
		cacti	<	0.8.8d

Details

VuXML ID	a3929112-181b-11e5-a1cf-002590263bf5
Discovery	2015-06-09
Entry	2015-06-21

The Cacti Group, Inc. reports:

Important Security Fixes

Multiple XSS and SQL injection vulnerabilities

Changelog

bug: Fixed SQL injection VN: JVN#78187936 / TN:JPCERT#98968540

bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting Vulnerability Notification

bug#0002571: SQL Injection and Location header injection from cdef id CVE-2015-4342

bug#0002572: SQL injection in graph template

[source]

References

CVE Name	CVE-2015-4342
FreeBSD PR	ports/200963
Message	http://seclists.org/fulldisclosure/2015/Jun/19
URL	http://www.cacti.net/release_notes_0_8_8d.php