CVE-2014-2708
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2014-2708
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2014-2708.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2014-2708
- Downstream
- Related
- Published
- 2014-04-10T20:29:21Z
- Modified
- 2025-08-09T20:01:26Z
- Summary
- [none]
- Details
-
Multiple SQL injection vulnerabilities in graphxport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers to execute arbitrary SQL commands via the (1) graphstart, (2) graphend, (3) graphheight, (4) graphwidth, (5) graphnolegend, (6) printsource, (7) localgraphid, or (8) rraid parameter.
- References
-
- http://secunia.com/advisories/57647
- http://secunia.com/advisories/59203
- http://www.debian.org/security/2014/dsa-2970
- https://security.gentoo.org/glsa/201509-03
- http://svn.cacti.net/viewvc?view=rev&revision=7439
- https://bugzilla.redhat.com/show_bug.cgi?id=1084258
- http://bugs.cacti.net/view.php?id=2405
- http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131821.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131842.html
- http://seclists.org/oss-sec/2014/q2/15
- http://seclists.org/oss-sec/2014/q2/2
- http://www.securityfocus.com/bid/66555
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742768
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92278