CVE-2020-35701

概要

参考情報

• asaf.me/2020/12/15/cacti-1-2-0-to-1-2-16-sql-injection · Exploit
• Cacti/cacti · Third Party Advisory
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6DDD22Z56THHDTXAFM447UH3BVINURIF
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C7DPUWZBAMCXFKAKUAJSHL3CKTOLGAK6
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NBKBR2MFZJ6C2I4I5PCRR6UERPY24XZN
• security.gentoo.org/glsa/202101-31 · Third Party Advisory

cacti のその他の脆弱性

• CVE-2026-40941中 6.5Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import signature validation byp…
• CVE-2026-40084中 6.5Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Traversal through the …
• CVE-2026-40083高 7.2Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have SQL Injection through unsanitized unseria…
• CVE-2026-40082中 5.4Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have missing session_regenerate_id() after log…
• CVE-2026-40080中 6.1Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Open Redirect through a subs…