The Cacti Group Cacti
15 CVEs affecting The Cacti Group Cacti. Latest disclosed: 2007-06-07. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2007-3113 | | 2007-06-07 | Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_… | |
CVE-2007-3112 | | 2007-06-07 | graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large valu… | |
CVE-2006-6799 | | 2006-12-28 | SQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled, allows remote attackers to execute arbitrary SQL commands via the… | |
CVE-2006-0147 | | 2006-01-09 | Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) Post… | |
CVE-2006-0146 | | 2006-01-09 | The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6… | |
CVE-2005-2149 | | 2005-07-06 | config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session information to gain privileges and disabl… | |
CVE-2005-2148 | | 2005-07-06 | Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary command… | |
CVE-2005-1526 | | 2005-06-22 | PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[incl… | |
CVE-2005-1525 | | 2005-06-22 | SQL injection vulnerability in config_settings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter. | |
CVE-2005-1524 | | 2005-06-22 | PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code vi… | |
CVE-2004-1736 | | 2004-12-31 | Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and po… | |
CVE-2004-1737 | | 2004-08-16 | SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) u… | |
CVE-2002-1479 | | 2003-04-22 | Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify da… | |
CVE-2002-1478 | | 2003-04-22 | Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode. | |
CVE-2002-1477 | | 2003-04-22 | graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during ed… |