SQL Injection in Cacti

CVE-2010-1431

SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the export_item_id parameter.

Vulnerability class: SQL Injection

EPSS: 0.038 (88.9th percentile) — read the EPSS interpretation.

Affected products

  • Cacti — versions 0.6, 0.8.1, 0.8.6i
  • N/a — versions n/a

Weakness classification (CWE)

References