CVE-2013-5589

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugs.cacti.net/view.php?id=2383Issue Tracking, Patch
http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.htmlThird Party Advisory
http://secunia.com/advisories/54652
http://www.debian.org/security/2013/dsa-2747Third Party Advisory
http://www.securityfocus.com/bid/62005
http://bugs.cacti.net/view.php?id=2383Issue Tracking, Patch
http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.htmlThird Party Advisory
http://secunia.com/advisories/54652
http://www.debian.org/security/2013/dsa-2747Third Party Advisory
http://www.securityfocus.com/bid/62005

Timeline

Published: Aug 29, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-559010.0Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 2 CVE-2013-559110.0Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and S CVE-2013-559210.0Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0 allow remote attackers to cause a denial of servic CVE-2013-55934.3The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey befor CVE-2013-55944.3Mozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding CVE-2013-55954.3The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunder CVE-2013-55966.8The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonke CVE-2013-559710.0Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 CVE-2013-55988.3PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle the appending of an IFRAME element, which al CVE-2013-559910.0Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) implementation in Mozill CVE-2013-560010.0Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox before 25.0, Firefox ESR 17.x b CVE-2013-560110.0Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Firefox ESR 17.x before