CVE-2020-14295

7.2

HIGHCVSS v3

Published

June 17, 2020

CVSS v2

6.5 MEDIUM

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.

Cacti/cacti

GitHubCacti ™

= 1.2.12NVD

cacti

NPMExtremely simple MongoDB/Redis backups to Amazon S3 with encryption and compression'

= 1.2.12NVD

fedora

Crates.io

More on this CVE

NVD↗GitHub Advisory↗

Base library for interacting with Fedora web services

= 31, = 32NVD

fedora

Python Package IndexPlaceholder for the fedora name

= 31, = 32NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 31, = 32NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 31, = 32NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 31, = 32NVD

Security Advisories

CVE-2020-14295

Description

More on this CVE