Skip to content
OpenAdvisories
Unscored DSA-1954-1 3 CVEs

cacti - insufficient input sanitising

Published Dec 16, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 cacti 0.8.6i-3.6
Debian · 5.0 cacti 0.8.7b-2.1+lenny1

Vulnerabilities 3

  • Unscored —
    CVE-2007-3112

    graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of se…

    cacti Debian
  • Unscored —
    CVE-2007-3113

    Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumpt…

    cacti Debian
  • Unscored —
    CVE-2009-4032 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web scri…

    cacti Debian