CVE-2010-2092

SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter…

published May 27, 2010

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a valid rra_id value in a POST request or a cookie, which causes the POST or cookie value to bypass the validation routine, but inserts the $_GET value into the resulting query.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01370 · 71.7th percentile
Published
2010-05-27T22:00Z
EPSS history
Timeline
  • 27 MAY 22:00Z
    SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter…
    cvelistv5