Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2025-26520
Disclosure Date: February 12, 2025 (last updated February 12, 2025)
Cacti through 1.2.29 allows SQL injection in the template function in host_templates.php via the graph_template parameter. NOTE: this issue exists because of an incomplete fix for CVE-2024-54146.
0
Attacker Value
Unknown
CVE-2024-54146
Disclosure Date: January 27, 2025 (last updated January 28, 2025)
Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the template function of host_templates.php using the graph_template parameter. This vulnerability is fixed in 1.2.29.
0
