{"id":"CVE-2010-2092","aliases":["DEBIAN-CVE-2010-2092","DSA-2060-1","EUVD-2010-2109","GHSA-4j37-prg9-64vh","RHSA-2010:0635"],"status":"published","title":"SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to...","description":"SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a valid rra_id value in a POST request or a cookie, which causes the POST or cookie value to bypass the validation routine, but inserts the $_GET value into the resulting query.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0137,"percentile":0.7209,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-89"],"published":"2010-05-27T22:00:00Z","modified":"2026-10-23T17:47:47Z","fixes":[{"ecosystem":"Debian:12","package":"cacti","fixed_in":["0.8.7e-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cacti","fixed_in":["0.8.7e-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cacti","fixed_in":["0.8.7e-4"],"sources":["osv"]},{"ecosystem":"Debian:5.0","package":"cacti","fixed_in":["0.8.7b-2.1+lenny3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7e-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7e-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7e-4"}]}]},{"source":"osv","ecosystem":"Debian:5.0","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7b-2.1+lenny3"}]}],"versions":["0.8.7b-2.1","0.8.7b-2.1+lenny1","0.8.7b-2.1+lenny2"]},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"GeoIP","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.7-0.1.20090931cvs.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"GeoIP-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.7-0.1.20090931cvs.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"GeoIP-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.7-0.1.20090931cvs.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"blacs-mvapich1-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20000224-7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"blacs-mvapich1-gnu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20000224-7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"blacs-openmpi-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20000224-9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"blacs-openmpi-gnu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20000224-9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7g-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-RHEL-OFED","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-RHEL-OFED-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-base-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-base-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1-49"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-ganglia-agent-v3_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0-3.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-ganglia-server-v3_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0-3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-gnome-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-icr-facilitator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-lava-compute-v1_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-mvapich1-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1-4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-nagios-installer-v2_12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"component-ntop-v3_3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3-12"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"environment-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.7b-7.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"environment-modules-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.7b-7.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"initrd-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"iozone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3-5.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"iozone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3-5.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-cacti","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-47"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-ganglia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0-8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1-5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-lava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-11"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-nagios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-ntop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3-13"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-rhel-ofed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kit-rhel_java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0-3.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-appglobals-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-autoinstall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-base-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-base-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-base-node-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-buildkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-driverpatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-hardware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-kitops","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-md5crypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-net-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-networktool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-nodeinstaller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-nodeinstaller-patchfiles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-path","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-release","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-repoman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"kusu-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"lava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"lava-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"lava-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"lava-master-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"lava-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"linpack-mvapich1-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0a-7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"linpack-openmpi-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0a-6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-apt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-breeze","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-by_ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-dig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-disk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-disk_smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-dummy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-file_age","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-flexlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-fping","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-hpjd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-icmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ide_smart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ifoperstatus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ifstatus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ircd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-linux_raid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-load","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-log","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-mailq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-mrtg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-mrtgtraf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-nagios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-nrpe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-12.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-nt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-nwstat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-overcr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ping","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-procs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-radius","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-real","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-rpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-sensors","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-swap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-tcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-time","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-udp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-ups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-users","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nagios-plugins-wave","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"netcdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.2-7.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"netcdf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.2-7.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"netcdf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.2-7.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nrpe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-12.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"nrpe-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-12.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"ntop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.9-7.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"ntop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.9-7.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"pcm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"pcm-kit-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"pcm-kit-hpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-22"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"pcm-kit-ntop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"platform_mvapich","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-0.3635.1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"primitive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"python-IPy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.70-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"python-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"python-psycopg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"python-psycopg2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"python-psycopg2-zope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"scalapack-mvapich1-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"scalapack-mvapich1-gnu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"scalapack-openmpi-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hpc_solution:1.0","package":"scalapack-openmpi-gnu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-9"}]}],"bundled":7}],"products":[{"vendor":"cacti","product":"cacti"}],"references":[{"url":"http://www.cacti.net/changelog.php","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2010/dsa-2060","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/41041","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0635.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2132","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://php-security.org/2010/05/13/mops-2010-023-cacti-graph-viewer-sql-injection-vulnerability/index.html","tags":["x_refsource_MISC","x_transferred","Exploit","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2092","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4j37-prg9-64vh"},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-2092","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0635","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=459229","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=541279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=585401","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=599419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=609076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=609093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=609115","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0635.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-4032","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-4032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-4032","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1431","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1431","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1431","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1644","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1645","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2092","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2092","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2544","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2544","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2544","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2545","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2545","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2545","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2010-2092","description":"SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a valid rra_id value in a POST request or a cookie, which causes the POST or cookie value to bypass the validation routine, but inserts the $_GET value into the resulting query.","status":"published","published":"2010-05-27T22:00:00Z","modified":"2024-08-07T02:17:14.49Z","updated_at":"2026-11-02T14:33:27.01833Z"}],"euvd":[{"id":"EUVD-2010-2109","description":"SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a valid rra_id value in a POST request or a cookie, which causes the POST or cookie value to bypass the validation routine, but inserts the $_GET value into the resulting query.","status":"published","published":"2010-05-27T22:00:00Z","modified":"2024-08-07T02:17:14Z","updated_at":"2026-11-03T01:39:38.920426Z"}],"ghsa":[{"id":"GHSA-4j37-prg9-64vh","title":"SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to...","description":"SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a valid rra_id value in a POST request or a cookie, which causes the POST or cookie value to bypass the validation routine, but inserts the $_GET value into the resulting query.","status":"published","published":"2022-05-17T05:33:28Z","modified":"2023-01-28T05:04:28Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:44:10.891174Z"}],"nvd":[{"id":"CVE-2010-2092","description":"SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a valid rra_id value in a POST request or a cookie, which causes the POST or cookie value to bypass the validation routine, but inserts the $_GET value into the resulting query.","status":"published","published":"2010-05-27T22:30:01.467Z","modified":"2026-06-16T23:19:57.98Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:01:47.724369Z"}],"osv":[{"id":"CVE-2010-2092","description":"SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a valid rra_id value in a POST request or a cookie, which causes the POST or cookie value to bypass the validation routine, but inserts the $_GET value into the resulting query.","status":"published","published":"2010-05-27T22:30:01Z","modified":"2026-04-10T03:41:16.239249Z","updated_at":"2026-11-02T15:43:57.991581Z"},{"id":"DEBIAN-CVE-2010-2092","description":"SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a valid rra_id value in a POST request or a cookie, which causes the POST or cookie value to bypass the validation routine, but inserts the $_GET value into the resulting query.","status":"published","published":"2010-05-27T22:30:01.467Z","modified":"2026-10-23T17:47:47.460407189Z","updated_at":"2026-11-02T15:45:24.316685Z"},{"id":"DSA-2060-1","title":"cacti - SQL injection","status":"published","published":"2010-06-13T00:00:00Z","modified":"2026-03-09T01:23:31.605153Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"RHSA-2010:0635","title":"Red Hat Security Advisory: Red Hat High Performance Computing (HPC) Solution 5.5","status":"published","published":"2024-09-15T18:27:16Z","modified":"2026-01-29T10:56:47.721948Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}