cacti

175 results · Feed

• Unscored —
  CVE-2006-6799

  SQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled, allows remote attackers to…

  cacti Debian
  Dec 28, 2006
• Unscored —
  CVE-2006-0806 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow r…

  cacti libphp-adodb Debian
  Feb 21, 2006
• Unscored —
  CVE-2006-0410

  SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary S…

  cacti libphp-adodb Debian
  Jan 25, 2006
• Unscored —
  CVE-2006-0146 Public exploit EPSS 13%

  The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuk…

  cacti libphp-adodb Debian
  Jan 9, 2006
• Unscored —
  CVE-2006-0147 Public exploit EPSS 13%

  Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple…

  cacti libphp-adodb Debian
  Jan 9, 2006
• Unscored —
  CVE-2005-2148

  Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remot…

  cacti Debian
  Jul 6, 2005
• Unscored —
  CVE-2005-2149

  config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session i…

  cacti Debian
  Jul 6, 2005
• Unscored —
  CVE-2005-1525

  SQL injection vulnerability in config_settings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary…

  cacti Debian
  Jun 22, 2005
• Unscored —
  CVE-2005-1526 Public exploit EPSS 17%

  PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execut…

  cacti Debian
  Jun 22, 2005
• Unscored —
  CVE-2005-1524 Public exploit EPSS 16%

  PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote at…

  cacti Debian
  Jun 22, 2005
• Unscored —
  CVE-2004-1736

  Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.…

  cacti Debian
  Feb 26, 2005
• Unscored —
  CVE-2004-1737 Public exploit

  SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands…

  cacti Debian
  Feb 26, 2005
• Unscored —
  CVE-2002-1477

  graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via she…

  cacti Debian
  Sep 1, 2004
• Unscored —
  CVE-2002-1479

  Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permission…

  cacti Debian
  Sep 1, 2004
• Unscored —
  CVE-2002-1478

  Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.

  cacti Debian
  Sep 1, 2004