CyberRota Analysis
AI-GeneratedCacti's sanitize_sql_column() function is vulnerable to time-based blind SQL injection due to inadequate input validation, allowing authenticated users to manipulate SQL queries through the `sort_column` parameter. This flaw enables attackers to execute arbitrary SQL commands, potentially compromising the integrity and confidentiality of the database. Organizations using Cacti should prioritize patching this vulnerability to protect against potential data breaches and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Cacti's sanitize_sql_column (lib/functions.php) sanitizes user-supplied ORDER BY column names using the regex . Because this allowlist retains letters, digits, underscore, parentheses, and dot (intended to support expressions like COUNT(id) and table.column), a payload such as passes through completely unmodified.