CVE-2015-8377

SQL injection vulnerability in the host_new_graphs_save function in graphs_new.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute…

published December 15, 2015

CVSS
—
EPSS
2%
Percentile
77.0
In the wild
Unconfirmed
What it is

SQL injection vulnerability in the host_new_graphs_save function in graphs_new.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted serialized data in the selected_graphs_array parameter in a save action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01695 · 77.0th percentile
Published
2015-12-15T21:00Z
EPSS history
Timeline
  • 15 DEC 21:00Z
    SQL injection vulnerability in the host_new_graphs_save function in graphs_new.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute…
    cvelistv5