Skip to content
The Cacti Group vulnerabilities
Newest
-
cacti, fedoraproject fedora +1 more
Cacti RCE vulnerability when importing packages
CVE-2024-25641
Public exploitFix available
EPSS 86.3%
9.1 Critical
-
the cacti group cacti
Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of...
CVE-2007-3113
Fix available
6.8 Medium
-
the cacti group cacti
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users...
CVE-2007-3112
Fix available
7.8 High
-
the cacti group cacti
SQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled,...
CVE-2006-6799
Fix available
7.5 High
-
john lim adodb, mantis, moodle +2 more +4 more
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4...
CVE-2006-0147
Public exploitFix available
EPSS 13.1%
7.5 High
-
john lim adodb, mantis, mediabeez +3 more +5 more
The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including ...
CVE-2006-0146
Public exploitFix available
EPSS 13.2%
7.5 High
-
the cacti group cacti
config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch,...
CVE-2005-2149
Fix available
10.0 High
-
the cacti group cacti
Cacti 0.8.6e and earlier does not perform proper input validation to protect against common...
CVE-2005-2148
Fix available
7.5 High
-
the cacti group cacti
PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows...
CVE-2005-1526
Public exploitFix available
EPSS 16.6%
7.5 High
-
the cacti group cacti
SQL injection vulnerability in config_settings.php for Cacti before 0.8.6e allows remote...
CVE-2005-1525
Fix available
7.5 High
-
the cacti group cacti
PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier...
CVE-2005-1524
Public exploitFix available
EPSS 15.9%
5.0 Medium
-
the cacti group cacti
Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1)...
CVE-2004-1736
Fix available
5.0 Medium
-
the cacti group cacti, gentoo linux +1 more
SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute...
CVE-2004-1737
Public exploitFix available
7.5 High
-
the cacti group cacti
Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has...
CVE-2002-1479
Fix available
4.6 Medium
-
the cacti group cacti
Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in...
CVE-2002-1478
Fix available
10.0 High
-
the cacti group cacti
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute...
CVE-2002-1477
Fix available
7.5 High