Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via the (1) hostname or (2) description parameter to host.php, or (3) the host_id parameter to data_sources.php.

The remote host is affected by the vulnerability described in GLSA-201401-20 (Cacti: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Cacti. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could execute arbitrary SQL commands via specially       crafted parameters, execute arbitrary shell code or inject malicious       script code.
  Workaround :

    There is no known workaround at this time.

Several vulnerabilities have been discovered in Cacti, a graphing tool for monitoring data. Multiple cross site scripting issues allow remote attackers to inject arbitrary web script or HTML. A SQL injection vulnerability allows remote attackers to execute arbitrary SQL commands.

According to its self-reported version number, the Cacti application running on the remote web server is prior to version 0.8.7f. It is, therefore, potentially affected by the following vulnerabilities :

  - A vulnerability exists in 'templates_export.php' due to     improper validation of input to the 'export_item_id'     parameter. A remote attacker can exploit this to inject     SQL queries to disclose arbitrary data. (CVE-2010-1431)

  - Cross-site scripting vulnerabilities exist related to     the 'host_id' parameter of 'data_sources.php', or the     'hostname' and 'description' parameters of 'host.php',     which a remote attacker can exploit to inject arbitrary     web script or HTML. (CVE-2010-1644)

  - A SQL injection vulnerability in 'graph.php' exists     which can be exploited by a remote attacker using     specially crafted GET requests to the 'rra_id' parameter     which can cause a corresponding POST request or cookie     to bypass proper validation. (CVE-2010-2092)

ID	Name	Product	Family	Type	Severity
72075	GLSA-201401-20 : Cacti: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high
57524	Debian DSA-2384-2 : cacti - several vulnerabilities	Nessus	Debian Local Security Checks	Local	high
46222	Cacti < 0.8.7f Multiple Input Validation Vulnerabilities	Nessus	CGI abuses	Remote	high

Detections

Analytics

CVE-2010-1644

medium

Tenable Plugins

high

high

high