CVE-2013-5589
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers...
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploit likelihood
What each source reports
NVD Score used
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
- Record
CVE-2013-5589- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
- Record
CVE-2013-5589- Updated
- 2026-11-02
EUVDEUVD-2013-5429 No score
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
- Record
EUVD-2013-5429- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-33xj-hh55-6653 No score
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers...
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
- Record
GHSA-33xj-hh55-6653- Weakness
- CWE-89
- Updated
- 2026-11-02
OSV No score
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
- Record
CVE-2013-5589- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-5589 No score
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
- Record
DEBIAN-CVE-2013-5589- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10084-1 No score
cacti-0.8.8h-1.2 on GA media
These are all security issues fixed in the cacti-0.8.8h-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10084-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-5589 No score
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
- Record
UBUNTU-CVE-2013-5589- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cactiDebian:12 |
before 0.8.8b+dfsg-3 | 0.8.8b+dfsg-3 |
cactiDebian:13 |
before 0.8.8b+dfsg-3 | 0.8.8b+dfsg-3 |
cactiDebian:14 |
before 0.8.8b+dfsg-3 | 0.8.8b+dfsg-3 |
cactiDebian:6.0 From an advisory covering 2 CVEs |
before 0.8.7g-1+squeeze3, plus listed versions 0.8.7g-10.8.7g-1+squeeze10.8.7g-1+squeeze2 |
0.8.7g-1+squeeze3 |
cactiDebian:7 From an advisory covering 2 CVEs |
before 0.8.8a+dfsg-5+deb7u2, plus listed versions 0.8.8a+dfsg-50.8.8a+dfsg-5+deb7u1 |
0.8.8a+dfsg-5+deb7u2 |
cactiopenSUSE:Tumbleweed From an advisory covering 18 CVEs |
before 0.8.8h-1.2 | 0.8.8h-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-5589 is a high vulnerability (CVSS 7.5) in Cacti, published August 29, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.99%, the 80th percentile. Fixed in cacti 0.8.8b+dfsg-3.
References
secunia.com/advisories/54652
debian.org/security/2013/dsa-2747
bugs.cacti.net/view.php?id=2383
lists.opensuse.org/opensuse-updates/2015-03/msg00034.html
securityfocus.com/bid/62005
nvd.nist.gov/vuln/detail/CVE-2013-5589
Show 22 moreShow less
github.com/advisories/GHSA-33xj-hh55-6653
security-tracker.debian.org/tracker/CVE-2013-5589
ubuntu.com/security/CVE-2013-5589
cve.org/CVERecord?id=CVE-2013-5589
suse.com/security/cve/CVE-2013-5588