CVE-2020-35701

8.8

HIGHCVSS v3

Published

January 11, 2021

CVSS v2

6.5 MEDIUM

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in data_debug.php allows remote authenticated attackers to execute arbitrary SQL commands via the site_id parameter. This can lead to remote code execution.

Cacti/cacti

GitHubCacti ™

>= 1.2.0, <= 1.2.16NVD

cacti

NPMExtremely simple MongoDB/Redis backups to Amazon S3 with encryption and compression'

>= 1.2.0, <= 1.2.16NVD

fedora

Crates.io

More on this CVE

NVD↗GitHub Advisory↗

Base library for interacting with Fedora web services

= 32, = 33, = 34NVD

fedora

Python Package IndexPlaceholder for the fedora name

= 32, = 33, = 34NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 32, = 33, = 34NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 32, = 33, = 34NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 32, = 33, = 34NVD

Security Advisories

CVE-2020-35701

Description

More on this CVE