CVE-2016-3172

Source
https://cve.org/CVERecord?id=CVE-2016-3172
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-3172.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-3172
Downstream
Related
Withdrawn
2026-01-27T04:15:28.012710Z
Published
2016-04-12T16:59:03Z
Modified
2026-01-27T04:15:28.012710Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parentid parameter in an itemedit action.

References

Affected packages