bugtraq - cacti -- Multiple security vulnerabilities have been discovered

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 12 Feb 2008 14:42:01 -0200
From: Mario Sergio Candian <mscandian@...ebsdbrasil.com.br>
To: bugtraq@...urityfocus.com
Subject: cacti -- Multiple security vulnerabilities have been discovered

Affected packages:
cacti < 0.8.7b


Multiple security vulnerabilities have been discovered in Cacti's web 
interface:

    * XSS vulnerabilities
    * Path disclosure vulnerabilities
    * SQL injection vulnerabilities
    * HTTP response splitting vulnerabilities

References:
http://forums.cacti.net/about25749.html

-- 
Mario Sergio Candian
-
Live your dreams and face your fears