Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (4)
| Vulnerability |
Summary |
Aliases |
|
VCID-4ytj-s8hh-6bd5
|
SQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL commands via the login_username parameter.
|
CVE-2011-4824
|
|
VCID-ddq2-myvr-wfgz
|
Cross-site request forgery (CSRF) vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
|
CVE-2011-5223
|
|
VCID-jmv3-vh81-zfdq
|
Multiple vulnerabilities have been discovered in Cacti, the worst of which can lead to privilege escalation.
|
CVE-2022-48547
|
|
VCID-p2u2-5yuu-jydy
|
As an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" to successfully execute the JavaScript payload present in the "ref" URL parameter.
|
CVE-2021-26247
|