Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2020-14295

A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.

  • Published: Jun 17, 2020
  • Updated: Apr 13, 2023
  • CVE: CVE-2020-14295
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.2
  • AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
cacti / cacti 1.2.12 1.2.12.x
fedoraproject / fedora 31 31.x
fedoraproject / fedora 32 32.x