Approved changes feed: RSS · Atom

cpe:2.3:a:cacti:cacti:0.8.6f:*:*:*:*:*:*:*

part: a version: 0.8.6f update: *

VendorCacti (e6763402-5d6e-5742-a2a8-4d1f80e2547b)
ProductCacti (7f9724ce-de8d-5e88-b014-4015b431cbe4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cacti purl2cpe 2026-06-01 10:18:17.917876
pkg:deb/ubuntu/cacti purl2cpe 2026-06-01 10:18:17.917877
pkg:github/cacti/cacti purl2cpe 2026-06-01 10:18:17.917878
pkg:rpm/fedora/cacti purl2cpe 2026-06-01 10:18:17.917880
pkg:rpm/opensuse/cacti purl2cpe 2026-06-01 10:18:17.917881

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5589 vulnerable 2026-06-08 05:04:52.315219 Details available
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Published: 2013-08-29T10:00:00.000Z
Updated: 2024-08-06T17:15:21.449Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5588 vulnerable 2026-06-08 05:04:52.303580 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the step parameter to install/index.php or (2) the id parameter to cacti/host.php.
Published: 2013-08-29T10:00:00.000Z
Updated: 2024-08-06T17:15:21.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1435 vulnerable 2026-06-08 05:03:53.955669 Details available
(1) snmp.php and (2) rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-08-06T15:04:48.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1434 vulnerable 2026-06-08 05:03:53.942894 Details available
Multiple SQL injection vulnerabilities in (1) api_poller.php and (2) utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-08-06T15:04:48.321Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5223 vulnerable 2026-06-08 04:59:35.204899 Details available
Cross-site request forgery (CSRF) vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Published: 2012-10-25T17:00:00.000Z
Updated: 2024-08-07T00:30:46.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4824 vulnerable 2026-06-08 04:59:33.186462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2545 vulnerable 2026-06-08 04:55:08.648829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2544 vulnerable 2026-06-08 04:55:08.647329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2543 vulnerable 2026-06-08 04:55:08.639084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2092 vulnerable 2026-06-08 04:54:11.632128 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1645 vulnerable 2026-06-08 04:54:09.623696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1644 vulnerable 2026-06-08 04:54:09.622593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1431 vulnerable 2026-06-08 04:54:08.088675 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4112 vulnerable 2026-06-08 04:51:47.068136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0786 vulnerable 2026-06-08 04:50:17.776620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0785 vulnerable 2026-06-08 04:50:17.775832 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0784 vulnerable 2026-06-08 04:50:17.775011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0783 vulnerable 2026-06-08 04:50:17.772222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.