SQL Injection

Every one of the 45 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Cacti 1.2.24 - SQL InjectionCVE-2023-39361Cacti · CVSS 9.8 · 89% likely

   CWE-89

2. A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts st…CVE-2020-14295Cacti · 86% likely

   CWE-89

3. Cacti SQL Injection vulnerabilityCVE-2023-49085Cacti · CVSS 8.8 · 74% likely

   CWE-89

4. SQL Injection vulnerability when managing SNMP Notification ReceiversCVE-2023-51448Cacti · CVSS 8.8 · 67% likely

   CWE-89

5. Cacti has a SQL Injection vulnerability when view host templateCVE-2024-54146Cacti · CVSS 7.6 · 46% likely

   CWE-89

6. Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are us…CVE-2019-17357Cacti · 34% likely

   CWE-89

7. SQL Injection vulnerability in automation_get_new_graphs_sqlCVE-2024-31445Cacti · CVSS 8.8 · 26% likely

   CWE-89

8. Cacti SQL Injection vulnerability in lib/html_form_templates.php by reading dirty data stored in databaseCVE-2024-31458Cacti · CVSS 4.6 · 13% likely

   CWE-89

9. An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in data_debug.php allows remote authenticated attackers to execute arbitrary SQL commands via…CVE-2020-35701Cacti · 4.8% likely

   CWE-89

10. SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the export_item_id parameter.CVE-2010-1431Cacti · 3.8% likely

    CWE-89

11. Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated users to execute arbitrary SQL commands via the (1) graph_li…CVE-2008-0785Cacti · 3.4% likely

    CWE-89

12. SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id.CVE-2015-4342Cacti · 3.2% likely

    CWE-89

13. SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parent_id parameter in an item_edit…CVE-2016-3172Cacti · 2.8% likely

    CWE-89

14. SQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL commands via the login_username parameter.CVE-2011-4824Cacti · 2.4% likely

    CWE-89

15. SQL injection vulnerability in include/top_graph_header.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rra_id parameter in a pro…CVE-2015-8369Cacti · 2.3% likely

    CWE-89

16. SQL injection vulnerability in the host_new_graphs function in graphs_new.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via t…CVE-2015-8604Cacti · 2.3% likely

    CWE-89

17. SQL injection vulnerability in the graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via unspecified…CVE-2014-5262Cacti · 2.3% likely

    CWE-89

18. SQL injection vulnerability in graph_view.php in Cacti 0.8.8.g allows remote authenticated users to execute arbitrary SQL commands via the host_group_data parameter.CVE-2016-3659Cacti · 2.3% likely

    CWE-89

19. SQL injection vulnerability in the get_hash_graph_template function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via the g…CVE-2015-4454Cacti · 2.2% likely

    CWE-89

20. SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.CVE-2015-4634Cacti · 2.2% likely

    CWE-89

21. Authenticated SQL injection vulnerability in graphs.php in CactiCVE-2023-39359Cacti · CVSS 8.8 · 2.1% likely

    CWE-89

22. Authenticated SQL injection vulnerability in reports_user.php in CactiCVE-2023-39358Cacti · CVSS 8.8 · 2.0% likely

    CWE-89

23. SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2013-5589Cacti · 2.0% likely

    CWE-89

24. Multiple SQL injection vulnerabilities in graph_xport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers to execute arbitrary SQL commands via the (1) graph_start, (2…CVE-2014-2708Cacti · 1.9% likely

    CWE-89

25. A Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in CactiCVE-2023-39357Cacti · CVSS 8.8 · 1.8% likely

    CWE-89

26. SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the form_actions() function in the managers.php function.CVE-2023-46490Cacti · 1.8% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.