Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cacti cacti 0.6.7 vulnerabilities and exploits
(subscribe to this query)
905
VMScore
CVE-2009-4112
Cacti 0.8.7e and previous versions allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux - Get Memory Usage" setting to contain arbitrary commands.
Cacti Cacti 0.8.6f
Cacti Cacti 0.8.6c
Cacti Cacti 0.8.2
Cacti Cacti 0.8.1
Cacti Cacti 0.8.5a
Cacti Cacti 0.8.5
Cacti Cacti 0.8
Cacti Cacti 0.6.7
Cacti Cacti 0.8.4
Cacti Cacti 0.8.3a
Cacti Cacti 0.8.7a
Cacti Cacti
Cacti Cacti 0.8.7
Cacti Cacti 0.8.6i
Cacti Cacti 0.8.3
Cacti Cacti 0.8.2a
1 EDB exploit
445
VMScore
CVE-2008-0784
graph.php in Cacti 0.8.7 prior to 0.8.7b and 0.8.6 prior to 0.8.6k allows remote malicious users to obtain the full path via an invalid local_graph_id parameter and other unspecified vectors.
Cacti Cacti 0.8.2
Cacti Cacti 0.8.2a
Cacti Cacti 0.8.6f
Cacti Cacti 0.8.6i
Cacti Cacti 0.6.7
Cacti Cacti 0.8
Cacti Cacti 0.8.1
Cacti Cacti 0.8.5a
Cacti Cacti 0.8.6c
Cacti Cacti 0.8.4
Cacti Cacti 0.8.5
Cacti Cacti 0.8.7a
Cacti Cacti 0.8.3
Cacti Cacti 0.8.3a
Cacti Cacti 0.8.6j
Cacti Cacti 0.8.7
440
VMScore
CVE-2008-0783
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7 prior to 0.8.7b and 0.8.6 prior to 0.8.6k allow remote malicious users to inject arbitrary web script or HTML via (1) the view_type parameter to graph.php; (2) the filter parameter to graph_view.php; (3) the actio...
Cacti Cacti 0.8
Cacti Cacti 0.8.1
Cacti Cacti 0.8.5a
Cacti Cacti 0.8.6c
Cacti Cacti 0.6.7
Cacti Cacti 0.8.4
Cacti Cacti 0.8.5
Cacti Cacti 0.8.7a
Cacti Cacti 0.8.2
Cacti Cacti 0.8.2a
Cacti Cacti 0.8.6f
Cacti Cacti 0.8.6i
Cacti Cacti 0.8.3
Cacti Cacti 0.8.3a
Cacti Cacti 0.8.6j
Cacti Cacti 0.8.7
2 EDB exploits
770
VMScore
CVE-2008-0785
Multiple SQL injection vulnerabilities in Cacti 0.8.7 prior to 0.8.7b and 0.8.6 prior to 0.8.6k allow remote authenticated users to execute arbitrary SQL commands via the (1) graph_list parameter to graph_view.php, (2) leaf_id and id parameters to tree.php, (3) local_graph_id par...
Cacti Cacti 0.8.1
Cacti Cacti 0.8.2
Cacti Cacti 0.8.6f
Cacti Cacti 0.8.6i
Cacti Cacti 0.6.7
Cacti Cacti 0.8
Cacti Cacti 0.8.5a
Cacti Cacti 0.8.6c
Cacti Cacti 0.8.3a
Cacti Cacti 0.8.4
Cacti Cacti 0.8.5
Cacti Cacti 0.8.7a
Cacti Cacti 0.8.2a
Cacti Cacti 0.8.3
Cacti Cacti 0.8.6j
Cacti Cacti 0.8.7
4 EDB exploits
383
VMScore
CVE-2008-0786
CRLF injection vulnerability in Cacti 0.8.7 prior to 0.8.7b and 0.8.6 prior to 0.8.6k, when running on older PHP interpreters, allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Cacti Cacti 0.8.1
Cacti Cacti 0.8.2
Cacti Cacti 0.8.6c
Cacti Cacti 0.8.6f
Cacti Cacti 0.6.7
Cacti Cacti 0.8
Cacti Cacti 0.8.5
Cacti Cacti 0.8.5a
Cacti Cacti 0.8.3a
Cacti Cacti 0.8.4
Cacti Cacti 0.8.7
Cacti Cacti 0.8.7a
Cacti Cacti 0.8.2a
Cacti Cacti 0.8.3
Cacti Cacti 0.8.6i
Cacti Cacti 0.8.6j
668
VMScore
CVE-2002-1477
graphs.php in Cacti prior to 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
The Cacti Group Cacti 0.5
The Cacti Group Cacti 0.6.7
The Cacti Group Cacti 0.6.4
The Cacti Group Cacti 0.6.1
The Cacti Group Cacti 0.6
The Cacti Group Cacti 0.6.6
The Cacti Group Cacti 0.6.5
The Cacti Group Cacti 0.6.3
The Cacti Group Cacti 0.6.8
The Cacti Group Cacti 0.6.2
890
VMScore
CVE-2002-1478
Cacti prior to 0.6.8 allows malicious users to execute arbitrary commands via the "Data Input" option in console mode.
The Cacti Group Cacti 0.5
The Cacti Group Cacti 0.6.7
The Cacti Group Cacti 0.6.4
The Cacti Group Cacti 0.6.1
The Cacti Group Cacti 0.6
The Cacti Group Cacti 0.6.6
The Cacti Group Cacti 0.6.5
The Cacti Group Cacti 0.6.3
The Cacti Group Cacti 0.6.8
The Cacti Group Cacti 0.6.2
409
VMScore
CVE-2002-1479
Cacti prior to 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges.
The Cacti Group Cacti 0.5
The Cacti Group Cacti 0.6.7
The Cacti Group Cacti 0.6.4
The Cacti Group Cacti 0.6.1
The Cacti Group Cacti 0.6
The Cacti Group Cacti 0.6.6
The Cacti Group Cacti 0.6.5
The Cacti Group Cacti 0.6.3
The Cacti Group Cacti 0.6.8
The Cacti Group Cacti 0.6.2
755
VMScore
CVE-2010-1431
SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and previous versions allows remote malicious users to execute arbitrary SQL commands via the export_item_id parameter.
Cacti Cacti 0.8.5a
Cacti Cacti 0.8.5
Cacti Cacti 0.8.7
Cacti Cacti
Cacti Cacti 0.8.6d
Cacti Cacti 0.8.6b
Cacti Cacti 0.6.3
Cacti Cacti 0.6.2
Cacti Cacti 0.6.7
Cacti Cacti 0.8
Cacti Cacti 0.8.4
Cacti Cacti 0.8.3a
Cacti Cacti 0.8.6h
Cacti Cacti 0.8.6g
Cacti Cacti 0.6.5
Cacti Cacti 0.6.4
Cacti Cacti 0.8.6j
Cacti Cacti 0.8.7a
Cacti Cacti 0.8.6f
Cacti Cacti 0.8.6c
Cacti Cacti 0.8.7d
Cacti Cacti 0.8.7c
1 EDB exploit
383
VMScore
CVE-2010-1644
Multiple cross-site scripting (XSS) vulnerabilities in Cacti prior to 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote malicious users to inject arbitrary web script or HTML via the (1) hostname or (2) description parameter to ...
Cacti Cacti 0.5
Cacti Cacti 0.8.6k
Cacti Cacti 0.8.6d
Cacti Cacti 0.6.3
Cacti Cacti 0.8.7
Cacti Cacti 0.8.5a
Cacti Cacti 0.8.3
Cacti Cacti 0.6.8
Cacti Cacti 0.8.2
Cacti Cacti 0.8.5
Cacti Cacti 0.6.6
Cacti Cacti 0.8.7d
Cacti Cacti 0.8.7b
Cacti Cacti 0.8.7a
Cacti Cacti 0.6.2
Cacti Cacti 0.6.5
Cacti Cacti 0.8.6f
Cacti Cacti 0.8.6g
Cacti Cacti 0.8.6j
Cacti Cacti 0.8.7c
Cacti Cacti 0.6.1
Cacti Cacti 0.8
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4654
CVE-2023-49606
encryption
NULL pointer dereference
CVE-2024-4439
CVE-2024-4649
race condition
CVE-2024-27202
CVE-2024-34566
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »