Launchpad CVE tracker

CVE 2007-6035

SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.

Related bugs and status

CVE-2007-6035 (Candidate) is related to these bugs:

Bug #164072: [CVE-2007-6035] cacti has a sql injection vulnerability

		In	Importance	Status
164072	[CVE-2007-6035] cacti has a sql injection vulnerability	cacti (Ubuntu)	Undecided	Fix Released
164072	[CVE-2007-6035] cacti has a sql injection vulnerability	cacti (Ubuntu Dapper)	High	Fix Released
164072	[CVE-2007-6035] cacti has a sql injection vulnerability	cacti (Ubuntu Edgy)	High	Fix Released
164072	[CVE-2007-6035] cacti has a sql injection vulnerability	cacti (Ubuntu Feisty)	High	Fix Released
164072	[CVE-2007-6035] cacti has a sql injection vulnerability	cacti (Ubuntu Gutsy)	High	Fix Released
164072	[CVE-2007-6035] cacti has a sql injection vulnerability	cacti (Ubuntu Hardy)	Undecided	Fix Released
164072	[CVE-2007-6035] cacti has a sql injection vulnerability	cacti (Debian)	Unknown	Fix Released

Bug #173611: [cacti] missing input sanitising

Summary				In	Importance	Status
	173611	[cacti] missing input sanitising		cacti (Ubuntu)	Undecided	New

See the

CVE page on Mitre.org for more details.

References

CONFIRM: http://www.cacti.net/r...
SECUNIA: 27719
BID: 26487
FEDORA: FEDORA-2007-3683
MANDRIVA: MDKSA-2007:231
SUSE: SUSE-SR:2007:024
SECTRACK: 1018982
SECUNIA: 27745
DEBIAN: DSA-1418
SECUNIA: 27891
MISC: http://bugs.gentoo.org...
GENTOO: GLSA-200712-02
SECUNIA: 27950
SECUNIA: 27756
VUPEN: ADV-2007-3911
XF: cacti-graph-sql-inject...

Launchpad.net

CVE 2007-6035

Related bugs and status

Related bugs

References