Skip to content
OpenAdvisories
Unscored DSA-764-1 5 CVEs

cacti - several

Published Jul 21, 2005 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.0 cacti 0.6.7-2.5
Debian · 3.1 cacti 0.8.6c-7sarge2

Vulnerabilities 5

  • Unscored —
    CVE-2005-1524 Public exploit EPSS 16%

    PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote at…

  • Unscored —

    SQL injection vulnerability in config_settings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2005-1526 Public exploit EPSS 17%

    PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execut…

  • Unscored —

    Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remot…

  • Unscored —

    config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session i…