CA
Product
Cacti
15
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Cacti to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-3113 | – | Jun 7 | Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_height or (2)… Affected: through 0.8.6i |
| CVE-2007-3112 | – | Jun 7 | graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1)… Affected: through 0.8.6i |
| CVE-2006-6799 | – | Dec 28 | SQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled, allows remote attackers to execute arbitrary SQL commands via the (1) second or (2)… Affected: through 0.8.6i |
| CVE-2006-0146 | – | Jan 9 | The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7)… Affected: 0.8.6g |
| CVE-2006-0147 | – | Jan 9 | Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle,… Affected: 0.8.6g |
| CVE-2005-2149 | – | Jul 6 | config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session information to gain privileges and disable the use of… Affected: 0.8; 0.8.1; 0.8.2; 0.8.2a; 0.8.3; 0.8.3a; +9 more |
| CVE-2005-2148 | – | Jul 6 | Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary commands or SQL by sending… Affected: 0.8; 0.8.1; 0.8.2; 0.8.2a; 0.8.3; 0.8.3a; +9 more |
| CVE-2005-1526 | – | Jun 22 | PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[include_path] parameter Affected: through 0.8.6d; 0.5; 0.6; 0.6.1; 0.6.2; 0.6.3; +14 more |
| CVE-2005-1524 | – | Jun 22 | PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the… Affected: through 0.8.6d; 0.5; 0.6; 0.6.1; 0.6.2; 0.6.3; +14 more |
| CVE-2005-1525 | – | Jun 22 | SQL injection vulnerability in config_settings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter Affected: through 0.8.6d; 0.5; 0.6; 0.6.1; 0.6.2; 0.6.3; +14 more |
| CVE-2004-1736 | – | Dec 31 | Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php… Affected: 0.8.5a |
| CVE-2004-1737 | – | Aug 16 | SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2)… Affected: 0.6; 0.6.1; 0.6.2; 0.6.3; 0.6.4; 0.6.5; +13 more |
| CVE-2002-1477 | – | Apr 22 | graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode Affected: 0.5; 0.6; 0.6.1; 0.6.2; 0.6.3; 0.6.4; +4 more |
| CVE-2002-1479 | – | Apr 22 | Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti… Affected: 0.5; 0.6; 0.6.1; 0.6.2; 0.6.3; 0.6.4; +4 more |
| CVE-2002-1478 | – | Apr 22 | Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode Affected: 0.5; 0.6; 0.6.1; 0.6.2; 0.6.3; 0.6.4; +4 more |
Showing 15