TC
Vendor
The Cacti Group
15
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2007-3113 | CA Cacti The Cacti Group | – | Jun 7 | Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_height or (2)… |
| CVE-2007-3112 | CA Cacti The Cacti Group | – | Jun 7 | graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1)… |
| CVE-2006-6799 | CA Cacti The Cacti Group | – | Dec 28 | SQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled, allows remote attackers to execute arbitrary SQL commands via the (1) second or (2)… |
| CVE-2006-0146 | CA Cacti The Cacti Group | – | Jan 9 | The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7)… |
| CVE-2006-0147 | CA Cacti The Cacti Group | – | Jan 9 | Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle,… |
| CVE-2005-2149 | CA Cacti The Cacti Group | – | Jul 6 | config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session information to gain privileges and disable the use of… |
| CVE-2005-2148 | CA Cacti The Cacti Group | – | Jul 6 | Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary commands or SQL by sending… |
| CVE-2005-1526 | CA Cacti The Cacti Group | – | Jun 22 | PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[include_path] parameter |
| CVE-2005-1524 | CA Cacti The Cacti Group | – | Jun 22 | PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the… |
| CVE-2005-1525 | CA Cacti The Cacti Group | – | Jun 22 | SQL injection vulnerability in config_settings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter |
| CVE-2004-1736 | CA Cacti The Cacti Group | – | Dec 31 | Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php… |
| CVE-2004-1737 | CA Cacti The Cacti Group | – | Aug 16 | SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2)… |
| CVE-2002-1477 | CA Cacti The Cacti Group | – | Apr 22 | graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode |
| CVE-2002-1479 | CA Cacti The Cacti Group | – | Apr 22 | Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti… |
| CVE-2002-1478 | CA Cacti The Cacti Group | – | Apr 22 | Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode |