Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cacti cacti 0.6.8 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2002-1477
graphs.php in Cacti prior to 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
The Cacti Group Cacti 0.5The Cacti Group Cacti 0.6.7The Cacti Group Cacti 0.6.4The Cacti Group Cacti 0.6.1The Cacti Group Cacti 0.6The Cacti Group Cacti 0.6.6The Cacti Group Cacti 0.6.5The Cacti Group Cacti 0.6.3The Cacti Group Cacti 0.6.8The Cacti Group Cacti 0.6.2
10
CVSSv2
CVE-2002-1478
Cacti prior to 0.6.8 allows malicious users to execute arbitrary commands via the "Data Input" option in console mode.
The Cacti Group Cacti 0.5The Cacti Group Cacti 0.6.7The Cacti Group Cacti 0.6.4The Cacti Group Cacti 0.6.1The Cacti Group Cacti 0.6The Cacti Group Cacti 0.6.6The Cacti Group Cacti 0.6.5The Cacti Group Cacti 0.6.3The Cacti Group Cacti 0.6.8The Cacti Group Cacti 0.6.2
4.6
CVSSv2
CVE-2002-1479
Cacti prior to 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges.
The Cacti Group Cacti 0.5The Cacti Group Cacti 0.6.7The Cacti Group Cacti 0.6.4The Cacti Group Cacti 0.6.1The Cacti Group Cacti 0.6The Cacti Group Cacti 0.6.6The Cacti Group Cacti 0.6.5The Cacti Group Cacti 0.6.3The Cacti Group Cacti 0.6.8The Cacti Group Cacti 0.6.2
7.5
CVSSv2
CVE-2010-1431
SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and previous versions allows remote malicious users to execute arbitrary SQL commands via the export_item_id parameter.
Cacti Cacti 0.8.5aCacti Cacti 0.8.5Cacti Cacti 0.8.7Cacti CactiCacti Cacti 0.8.6dCacti Cacti 0.8.6bCacti Cacti 0.6.3Cacti Cacti 0.6.2Cacti Cacti 0.6.7Cacti Cacti 0.8Cacti Cacti 0.8.4Cacti Cacti 0.8.3aCacti Cacti 0.8.6hCacti Cacti 0.8.6gCacti Cacti 0.6.5Cacti Cacti 0.6.4Cacti Cacti 0.8.6jCacti Cacti 0.8.7aCacti Cacti 0.8.6fCacti Cacti 0.8.6cCacti Cacti 0.8.7dCacti Cacti 0.8.7c
6.5
CVSSv2
CVE-2010-1645
Cacti prior to 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in (1) the FQDN field of a Device or (2) the Vertical Label field of a Graph T...
Cacti Cacti 0.6.1Cacti Cacti 0.6Cacti Cacti 0.6.6Cacti Cacti 0.6.5Cacti Cacti 0.6.2Cacti Cacti 0.8.7Cacti Cacti 0.8.6gCacti Cacti 0.8.6Cacti Cacti 0.8.7aCacti Cacti 0.6.8aCacti Cacti 0.8.2Cacti Cacti 0.6.7Cacti Cacti 0.8.5Cacti Cacti 0.8.6bCacti Cacti 0.8.2aCacti Cacti 0.8.7bCacti Cacti 0.8.6cCacti Cacti 0.8.3aCacti Cacti 0.8.7dCacti Cacti 0.6.8Cacti Cacti 0.8.6iCacti Cacti 0.6.3
4.3
CVSSv2
CVE-2010-1644
Multiple cross-site scripting (XSS) vulnerabilities in Cacti prior to 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote malicious users to inject arbitrary web script or HTML via the (1) hostname or (2) description parameter to ...
Cacti Cacti 0.5Cacti Cacti 0.8.6kCacti Cacti 0.8.6dCacti Cacti 0.6.3Cacti Cacti 0.8.7Cacti Cacti 0.8.5aCacti Cacti 0.8.3Cacti Cacti 0.6.8Cacti Cacti 0.8.2Cacti Cacti 0.8.5Cacti Cacti 0.6.6Cacti Cacti 0.8.7dCacti Cacti 0.8.7bCacti Cacti 0.8.7aCacti Cacti 0.6.2Cacti Cacti 0.6.5Cacti Cacti 0.8.6fCacti Cacti 0.8.6gCacti Cacti 0.8.6jCacti Cacti 0.8.7cCacti Cacti 0.6.1Cacti Cacti 0.8
7.5
CVSSv2
CVE-2010-2092
SQL injection vulnerability in graph.php in Cacti 0.8.7e and previous versions allows remote malicious users to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a valid rra_id value in a POST request or a cookie, which causes the ...
Cacti Cacti 0.6.6Cacti Cacti 0.6.7Cacti Cacti 0.8.3Cacti Cacti 0.8.3aCacti Cacti 0.8.6dCacti Cacti 0.8.6fCacti Cacti 0.8.7aCacti Cacti 0.8.7bCacti Cacti 0.6.4Cacti Cacti 0.6.5Cacti Cacti 0.8.2Cacti Cacti 0.8.2aCacti Cacti 0.8.6bCacti Cacti 0.8.6cCacti Cacti 0.8.6kCacti Cacti 0.8.7Cacti Cacti 0.6Cacti Cacti 0.6.1Cacti Cacti 0.6.8Cacti Cacti 0.6.8aCacti Cacti 0.8.4Cacti Cacti 0.8.5
4.3
CVSSv2
CVE-2011-5223
Cross-site request forgery (CSRF) vulnerability in logout.php in Cacti prior to 0.8.7i allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Cacti Cacti 0.8.7dCacti Cacti 0.8.7cCacti Cacti 0.8.6gCacti Cacti 0.8.6cCacti Cacti 0.8.5Cacti Cacti 0.8.4Cacti Cacti 0.6.8Cacti Cacti 0.6.7Cacti Cacti 0.6.6Cacti Cacti 0.5Cacti Cacti 0.8.7bCacti Cacti 0.8.7aCacti Cacti 0.8.7Cacti Cacti 0.8.6hCacti Cacti 0.8.6kCacti Cacti 0.8.3Cacti Cacti 0.8.3aCacti Cacti 0.6.5Cacti Cacti 0.6.4Cacti CactiCacti Cacti 0.8.7gCacti Cacti 0.8.6a
4.3
CVSSv2
CVE-2010-2544
Cross-site scripting (XSS) vulnerability in utilities.php in Cacti prior to 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote malicious users to inject arbitrary web script or HTML via the filter parameter.
Cacti Cacti 0.5Cacti Cacti 0.8.6kCacti Cacti 0.8.6dCacti Cacti 0.6.3Cacti CactiCacti Cacti 0.8.7Cacti Cacti 0.8.5aCacti Cacti 0.8.3Cacti Cacti 0.6.8Cacti Cacti 0.8.2Cacti Cacti 0.8.5Cacti Cacti 0.6.6Cacti Cacti 0.8.7dCacti Cacti 0.8.7bCacti Cacti 0.8.7aCacti Cacti 0.6.2Cacti Cacti 0.6.5Cacti Cacti 0.8.6fCacti Cacti 0.8.6gCacti Cacti 0.8.6jCacti Cacti 0.8.7cCacti Cacti 0.6.1
4.3
CVSSv2
CVE-2010-2543
Cross-site scripting (XSS) vulnerability in include/top_graph_header.php in Cacti prior to 0.8.7g allows remote malicious users to inject arbitrary web script or HTML via the graph_start parameter to graph.php. NOTE: this vulnerability exists because of an incorrect fix for CVE-2...
Cacti Cacti 0.5Cacti Cacti 0.8.6kCacti Cacti 0.8.6dCacti Cacti 0.6.3Cacti CactiCacti Cacti 0.8.7Cacti Cacti 0.8.5aCacti Cacti 0.8.3Cacti Cacti 0.6.8Cacti Cacti 0.8.2Cacti Cacti 0.8.5Cacti Cacti 0.6.6Cacti Cacti 0.8.7dCacti Cacti 0.8.7bCacti Cacti 0.8.7aCacti Cacti 0.6.2Cacti Cacti 0.6.5Cacti Cacti 0.8.6fCacti Cacti 0.8.6gCacti Cacti 0.8.6jCacti Cacti 0.8.7cCacti Cacti 0.6.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook