ID de Prueba:	1.3.6.1.4.1.25623.1.0.800772
Categoría:	Web application abuses
Título:	Cacti 'export_item_id' Parameter SQL Injection Vulnerability
Resumen:	This host is running Cacti and is prone to SQL injection vulnerability.
Descripción:	Summary: This host is running Cacti and is prone to SQL injection vulnerability. Vulnerability Insight: Input passed to the 'templates_export.php' script via 'export_item_id' is not properly sanitized before being used in a SQL query. Vulnerability Impact: Successful exploitation will allow remote attackers to access, modify or delete information in the underlying database. Affected Software/OS: Cacti version 0.8.7e and prior. Solution: Apply the patch provided in the references. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	BugTraq ID: 39653 Common Vulnerability Exposure (CVE) ID: CVE-2010-1431 http://www.securityfocus.com/bid/39653 Debian Security Information: DSA-2039 (Google Search) http://www.debian.org/security/2010/dsa-2039 http://seclists.org/fulldisclosure/2010/Apr/272 http://www.mandriva.com/security/advisories?name=MDVSA-2010:092 http://www.exploit-db.com/sploits/Bonsai-SQL_Injection_in_Cacti.pdf RedHat Security Advisories: RHSA-2010:0635 https://rhn.redhat.com/errata/RHSA-2010-0635.html http://secunia.com/advisories/39568 http://secunia.com/advisories/39572 http://secunia.com/advisories/41041 SuSE Security Announcement: SUSE-SR:2010:011 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html http://www.vupen.com/english/advisories/2010/0986 http://www.vupen.com/english/advisories/2010/1107 http://www.vupen.com/english/advisories/2010/2132
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.