Skip to content
OpenAdvisories
Unscored DSA-3295-1 4 CVEs

cacti - security update

Published Jun 24, 2015 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 cacti 0.8.8a+dfsg-5+deb7u5
Debian · 8 cacti 0.8.8b+dfsg-8+deb8u1

Vulnerabilities 4

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in settings.php in Cacti before 0.8.8d allows remote attackers to inject arbit…

  • Unscored —

    SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspec…

  • Unscored —

    SQL injection vulnerability in the get_hash_graph_template function in lib/functions.php in Cacti before 0.8.8d allows …