Skip to content
OpenAdvisories
Unscored DLA-560-1 3 CVEs

cacti - security update

Published Jul 26, 2016 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 cacti 0.8.8a+dfsg-5+deb7u9

Vulnerabilities 3

  • Unscored —

    auth_login.php in Cacti before 0.8.8g allows remote authenticated users who use web authentication to bypass intended a…

  • Unscored —

    SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitr…

  • Unscored —

    SQL injection vulnerability in graph_view.php in Cacti 0.8.8.g allows remote authenticated users to execute arbitrary S…