Unscored severity · published Aug 16, 2004
CVE-2004-1737
SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2)…
–
CVSS
2.8%
EPSS
No
On KEV
Description
SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Cacti · The Cacti Group
0.6; 0.6.1; 0.6.2; 0.6.3; 0.6.4; 0.6.5; +13 more · source: NVD
LI
Linux · Gentoo
1.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1737
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1737
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025376.html
marc.info
http://marc.info/?l=bugtraq&m=109272483621038&w=2
Exploit
http://secunia.com/advisories/12308
Patch
http://www.gentoo.org/security/en/glsa/glsa-200408-21.xml
Exploit
http://www.securityfocus.com/bid/10960
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17011
More from Linux
9.8
CVE-2024-12084
Rsync: heap buffer overflow in rsync due to improper checksum length handling
7.5
CVE-2024-12087
Rsync: path traversal vulnerability in rsync
7.5
CVE-2024-12088
Rsync: --safe-links option bypass leads to path traversal
7.5
CVE-2024-12085
Rsync: info leak via uninitialized stack contents
6.8
CVE-2024-12086
A flaw was found in rsync