Published: 22/06/2005 Updated: 11/07/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 510

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote malicious users to execute arbitrary PHP code via the config[library_path] parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
the cacti group cacti 0.6
the cacti group cacti 0.6.1
the cacti group cacti 0.6.8
the cacti group cacti 0.6.8a
the cacti group cacti 0.8.4
the cacti group cacti 0.8.5a
the cacti group cacti
the cacti group cacti 0.6.4
the cacti group cacti 0.6.5
the cacti group cacti 0.8.2
the cacti group cacti 0.8.2a
the cacti group cacti 0.5
the cacti group cacti 0.6.6
the cacti group cacti 0.6.7
the cacti group cacti 0.8.3
the cacti group cacti 0.8.3a
the cacti group cacti 0.6.2
the cacti group cacti 0.6.3
the cacti group cacti 0.8
the cacti group cacti 0.8.1

Several vulnerabilities have been discovered in cacti, a round-robin database (RRD) tool that helps create graphs from database information The Common Vulnerabilities and Exposures Project identifies the following problems: CAN-2005-1524 Maciej Piotr Falkiewicz and an anonymous researcher discovered an input validation bug that allows an ...

source: wwwsecurityfocuscom/bid/14129/info RaXnet Cacti is prone to a remote command execution vulnerability that manifests in the 'graph_imagephp' script The issue is due to a bug in the input filters that leads to a failure in the application to properly sanitize user-supplied input This issue can facilitate various attacks includin ...

source: wwwsecurityfocuscom/bid/14030/info RaXnet Cacti is prone to a remote file include vulnerability The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the 'top_graph_headerphp' script An attacker may leverage this issue to execute arbitrary server-side scrip ...

NVD-CWE-Other http://www.idefense.com/application/poi/display?id=265&type=vulnerabilities&flashstatus=true http://www.cacti.net/release_notes_0_8_6e.php http://www.gentoo.org/security/en/glsa/glsa-200506-20.xml http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978 http://www.debian.org/security/2005/dsa-764 http://www.osvdb.org/17426 http://securitytracker.com/id?1014252 http://secunia.com/advisories/15490 http://secunia.com/advisories/15931 http://secunia.com/advisories/16136 https://exchange.xforce.ibmcloud.com/vulnerabilities/21118 https://nvd.nist.gov https://www.debian.org/security/./dsa-764 https://www.exploit-db.com/exploits/25927/

CVE-2005-1524

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect