cve/2015/CVE-2015-4342.md

CVE-2015-4342

Description

SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id.

POC

Reference

• http://packetstormsecurity.com/files/132224/Cacti-SQL-Injection-Header-Injection.html
• http://seclists.org/fulldisclosure/2015/Jun/19

Github

• https://github.com/ARPSyndicate/cvemon