Show filters
16 Total Results
Displaying 11-16 of 16
Sort by:
Attacker Value
Unknown
CVE-2005-1526
Disclosure Date: June 22, 2005 (last updated February 22, 2025)
PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[include_path] parameter.
0
Attacker Value
Unknown
CVE-2005-1525
Disclosure Date: June 22, 2005 (last updated February 22, 2025)
SQL injection vulnerability in config_settings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
Attacker Value
Unknown
CVE-2004-1737
Disclosure Date: August 16, 2004 (last updated February 22, 2025)
SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters.
0
Attacker Value
Unknown
CVE-2002-1479
Disclosure Date: April 22, 2003 (last updated February 22, 2025)
Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges.
0
Attacker Value
Unknown
CVE-2002-1477
Disclosure Date: April 22, 2003 (last updated February 22, 2025)
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
0
Attacker Value
Unknown
CVE-2002-1478
Disclosure Date: April 22, 2003 (last updated February 22, 2025)
Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.
0
