Skip to content
OpenAdvisories
Unscored DLA-255-1 4 CVEs

cacti - security update

Published Jun 27, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 cacti 0.8.7g-1+squeeze6

Vulnerabilities 4

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in settings.php in Cacti before 0.8.8d allows remote attackers to inject arbit…

  • Unscored —

    SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspec…

  • Unscored —

    SQL injection vulnerability in the get_hash_graph_template function in lib/functions.php in Cacti before 0.8.8d allows …