Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cacti cacti vulnerabilities and exploits

(subscribe to this query)

NA
CVE-2011-4824
SQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL commands via the login_username parameter....
Cacti Cacti 0.8.7eCacti Cacti 0.8.7Cacti Cacti 0.8.6cCacti Cacti 0.8.6hCacti Cacti 0.8.3aCacti Cacti 0.8.7dCacti Cacti 0.6.8aCacti Cacti 0.6.8Cacti Cacti 0.6.3Cacti Cacti 0.8Cacti Cacti 0.8.6bCacti Cacti 0.8.5Cacti Cacti 0.8.2aCacti Cacti 0.8.7bCacti Cacti 0.5Cacti Cacti 0.8.6jCacti Cacti 0.8.1Cacti Cacti 0.6.5Cacti Cacti 0.8.6fCacti Cacti 0.8.6dCacti Cacti 0.8.6gCacti Cacti 0.8.4Cacti Cacti 0.8.7cCacti Cacti 0.8.6Cacti Cacti 0.8.7aCacti Cacti 0.8.2Cacti Cacti 0.6.4Cacti Cacti 0.6.7Cacti Cacti 0.8.6aCacti Cacti 0.8.5aCacti Cacti 0.8.3Cacti Cacti 0.8.6kCacti Cacti 0.6.1Cacti Cacti 0.6Cacti Cacti 0.8.6iCacti Cacti 0.6.6Cacti Cacti 0.6.2Cacti Cacti
NA
CVE-2008-0786
CRLF injection vulnerability in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k, when running on older PHP interpreters, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors....
Cacti Cacti 0.8.1Cacti Cacti 0.8.2Cacti Cacti 0.8.6cCacti Cacti 0.8.6fCacti Cacti 0.6.7Cacti Cacti 0.8Cacti Cacti 0.8.5Cacti Cacti 0.8.5aCacti Cacti 0.8.3aCacti Cacti 0.8.4Cacti Cacti 0.8.7Cacti Cacti 0.8.7aCacti Cacti 0.8.2aCacti Cacti 0.8.3Cacti Cacti 0.8.6iCacti Cacti 0.8.6j
NA
CVE-2014-5261
The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related to the rrdtool commandline in lib/rrd.php....
Cacti Cacti 0.8.7fCacti Cacti 0.8.7eCacti Cacti 0.8.7iCacti Cacti 0.8.7gCacti Cacti 0.8.7Cacti Cacti 0.8.6eCacti CactiCacti Cacti 0.8.7dCacti Cacti 0.8.7cCacti Cacti 0.8.8aCacti Cacti 0.8.8Cacti Cacti 0.8.7bCacti Cacti 0.8.7a
NA
CVE-2005-1525
SQL injection vulnerability in config_settings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter....
The Cacti Group Cacti 0.6.4The Cacti Group Cacti 0.6.5The Cacti Group Cacti 0.8.2The Cacti Group Cacti 0.8.2aThe Cacti Group Cacti 0.6The Cacti Group Cacti 0.6.1The Cacti Group Cacti 0.6.8The Cacti Group Cacti 0.6.8aThe Cacti Group Cacti 0.8.4The Cacti Group Cacti 0.8.5aThe Cacti Group Cacti 0.6.2The Cacti Group Cacti 0.6.3The Cacti Group Cacti 0.8The Cacti Group Cacti 0.8.1The Cacti Group CactiThe Cacti Group Cacti 0.5The Cacti Group Cacti 0.6.6The Cacti Group Cacti 0.6.7The Cacti Group Cacti 0.8.3The Cacti Group Cacti 0.8.3a
NA
CVE-2010-1644
Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via the (1) hostname or (2) description parameter to...
Cacti Cacti 0.5Cacti Cacti 0.8.6kCacti Cacti 0.8.6dCacti Cacti 0.6.3Cacti Cacti 0.8.7Cacti Cacti 0.8.5aCacti Cacti 0.8.3Cacti Cacti 0.6.8Cacti Cacti 0.8.2Cacti Cacti 0.8.5Cacti Cacti 0.6.6Cacti Cacti 0.8.7dCacti Cacti 0.8.7bCacti Cacti 0.8.7aCacti Cacti 0.6.2Cacti Cacti 0.6.5Cacti Cacti 0.8.6fCacti Cacti 0.8.6gCacti Cacti 0.8.6jCacti Cacti 0.8.7cCacti Cacti 0.6.1Cacti Cacti 0.8Cacti Cacti 0.8.6aCacti Cacti 0.8.6iCacti Cacti 0.8.6Cacti Cacti 0.6.8aCacti Cacti 0.6.7Cacti Cacti 0.8.1Cacti Cacti 0.8.4Cacti Cacti 0.8.6cCacti Cacti 0.6.4Cacti Cacti 0.8.6bCacti Cacti 0.8.2aCacti Cacti 0.8.3aCacti Cacti 0.8.6hCacti CactiCacti Cacti 0.6
NA
CVE-2010-2545
Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via (1) the name element in an XML template to...
Cacti Cacti 0.5Cacti Cacti 0.8.6kCacti Cacti 0.8.6dCacti Cacti 0.6.3Cacti CactiCacti Cacti 0.8.7Cacti Cacti 0.8.5aCacti Cacti 0.8.3Cacti Cacti 0.6.8Cacti Cacti 0.8.2Cacti Cacti 0.8.5Cacti Cacti 0.6.6Cacti Cacti 0.8.7dCacti Cacti 0.8.7bCacti Cacti 0.8.7aCacti Cacti 0.6.2Cacti Cacti 0.6.5Cacti Cacti 0.8.6fCacti Cacti 0.8.6gCacti Cacti 0.8.6jCacti Cacti 0.8.7cCacti Cacti 0.6.1Cacti Cacti 0.8Cacti Cacti 0.8.7eCacti Cacti 0.8.6aCacti Cacti 0.8.6iCacti Cacti 0.8.6Cacti Cacti 0.6.8aCacti Cacti 0.6.7Cacti Cacti 0.8.1Cacti Cacti 0.8.4Cacti Cacti 0.8.6cCacti Cacti 0.6.4Cacti Cacti 0.8.6bCacti Cacti 0.8.2aCacti Cacti 0.8.3aCacti Cacti 0.8.6hCacti Cacti 0.6
NA
CVE-2008-0784
graph.php in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allows remote attackers to obtain the full path via an invalid local_graph_id parameter and other unspecified vectors....
Cacti Cacti 0.8.2Cacti Cacti 0.8.2aCacti Cacti 0.8.6fCacti Cacti 0.8.6iCacti Cacti 0.6.7Cacti Cacti 0.8Cacti Cacti 0.8.1Cacti Cacti 0.8.5aCacti Cacti 0.8.6cCacti Cacti 0.8.4Cacti Cacti 0.8.5Cacti Cacti 0.8.7aCacti Cacti 0.8.3Cacti Cacti 0.8.3aCacti Cacti 0.8.6jCacti Cacti 0.8.7
NA
CVE-2014-5262
SQL injection vulnerability in the graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors....
Cacti CactiCacti Cacti 0.8.7dCacti Cacti 0.8.7cCacti Cacti 0.8.7bCacti Cacti 0.8.7fCacti Cacti 0.8.7eCacti Cacti 0.8.8aCacti Cacti 0.8.8Cacti Cacti 0.8.7aCacti Cacti 0.8.7Cacti Cacti 0.8.7iCacti Cacti 0.8.7gCacti Cacti 0.8.6e
NA
CVE-2010-1645
Cacti before 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in (1) the FQDN field of a Device or (2) the Vertical Label field of a Graph...
Cacti Cacti 0.6.1Cacti Cacti 0.6Cacti Cacti 0.6.6Cacti Cacti 0.6.5Cacti Cacti 0.6.2Cacti Cacti 0.8.7Cacti Cacti 0.8.6gCacti Cacti 0.8.6Cacti Cacti 0.8.7aCacti Cacti 0.6.8aCacti Cacti 0.8.2Cacti Cacti 0.6.7Cacti Cacti 0.8.5Cacti Cacti 0.8.6bCacti Cacti 0.8.2aCacti Cacti 0.8.7bCacti Cacti 0.8.6cCacti Cacti 0.8.3aCacti Cacti 0.8.7dCacti Cacti 0.6.8Cacti Cacti 0.8.6iCacti Cacti 0.6.3Cacti Cacti 0.8Cacti Cacti 0.8.6fCacti Cacti 0.8.6dCacti Cacti 0.8.4Cacti Cacti 0.8.7cCacti Cacti 0.5Cacti Cacti 0.8.6jCacti Cacti 0.8.1Cacti Cacti 0.6.4Cacti Cacti 0.8.5aCacti Cacti 0.8.6aCacti Cacti 0.8.6hCacti Cacti 0.8.3Cacti Cacti 0.8.6kCacti Cacti
NA
CVE-2010-1431
SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the export_item_id parameter....
Cacti Cacti 0.8.5aCacti Cacti 0.8.5Cacti Cacti 0.8.7Cacti CactiCacti Cacti 0.8.6dCacti Cacti 0.8.6bCacti Cacti 0.6.3Cacti Cacti 0.6.2Cacti Cacti 0.6.7Cacti Cacti 0.8Cacti Cacti 0.8.4Cacti Cacti 0.8.3aCacti Cacti 0.8.6hCacti Cacti 0.8.6gCacti Cacti 0.6.5Cacti Cacti 0.6.4Cacti Cacti 0.8.6jCacti Cacti 0.8.7aCacti Cacti 0.8.6fCacti Cacti 0.8.6cCacti Cacti 0.8.7dCacti Cacti 0.8.7cCacti Cacti 0.8.6aCacti Cacti 0.8.6Cacti Cacti 0.6.1Cacti Cacti 0.6Cacti Cacti 0.8.6iCacti Cacti 0.8.1Cacti Cacti 0.8.2Cacti Cacti 0.8.3Cacti Cacti 0.8.2aCacti Cacti 0.8.7bCacti Cacti 0.8.6kCacti Cacti 0.6.8aCacti Cacti 0.6.8Cacti Cacti 0.6.6Cacti Cacti 0.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2023-21068CVE-2023-21077unspecifiedCVE-2023-21070CVE-2023-21016file upload
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook