[FD] [CVE-2015-4342]SQL Injection and Location header injection from cdef id

############################################################################# # # DBAPPSECURITY LIMITED http://ift.tt/1QJxXMS # ############################################################################# # # CVE ID: CVE-2015-4342 # Product: cacti # Subject: SQL Injection and Location header injection from cdef id # Author: unhex # Date: June 9th 2015 # ############################################################################# The following issue has been RESOLVED. ====================================================================== http://ift.tt/1KnyCUr ====================================================================== Reported By: unhex Assigned To: rony ====================================================================== Project: Cacti Issue ID: 2571 Category: Database Reproducibility: always Severity: feature Priority: normal Status: resolved Resolution: fixed Fixed in Version: 0.8.8d ====================================================================== Date Submitted: 2015-06-02 23:39 EDT Last Modified: 2015-06-08 11:51 EDT ====================================================================== Summary: SQL Injection and Location header injection from cdef id Description: I found the security vulnerability.U can receive the attachment. ======================================================================

Source: Gmail -> IFTTT-> Blogger