Approved changes feed: RSS · Atom

cpe:2.3:a:cacti:cacti:0.8.6c:*:*:*:*:*:*:*

part: a version: 0.8.6c update: *

VendorCacti (e6763402-5d6e-5742-a2a8-4d1f80e2547b)
ProductCacti (7f9724ce-de8d-5e88-b014-4015b431cbe4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cacti purl2cpe 2026-06-01 10:18:17.917855
pkg:deb/ubuntu/cacti purl2cpe 2026-06-01 10:18:17.917856
pkg:github/cacti/cacti purl2cpe 2026-06-01 10:18:17.917858
pkg:rpm/fedora/cacti purl2cpe 2026-06-01 10:18:17.917859
pkg:rpm/opensuse/cacti purl2cpe 2026-06-01 10:18:17.917861

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5589 vulnerable 2026-06-08 05:04:52.315169 Details available
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Published: 2013-08-29T10:00:00.000Z
Updated: 2024-08-06T17:15:21.449Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5588 vulnerable 2026-06-08 05:04:52.302103 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the step parameter to install/index.php or (2) the id parameter to cacti/host.php.
Published: 2013-08-29T10:00:00.000Z
Updated: 2024-08-06T17:15:21.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1435 vulnerable 2026-06-08 05:03:53.955616 Details available
(1) snmp.php and (2) rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-08-06T15:04:48.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1434 vulnerable 2026-06-08 05:03:53.941371 Details available
Multiple SQL injection vulnerabilities in (1) api_poller.php and (2) utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-08-06T15:04:48.321Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5223 vulnerable 2026-06-08 04:59:35.204865 Details available
Cross-site request forgery (CSRF) vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Published: 2012-10-25T17:00:00.000Z
Updated: 2024-08-07T00:30:46.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4824 vulnerable 2026-06-08 04:59:33.185359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2545 vulnerable 2026-06-08 04:55:08.648793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2544 vulnerable 2026-06-08 04:55:08.647179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2543 vulnerable 2026-06-08 04:55:08.638108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2092 vulnerable 2026-06-08 04:54:11.632091 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1645 vulnerable 2026-06-08 04:54:09.623665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1644 vulnerable 2026-06-08 04:54:09.622560 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1431 vulnerable 2026-06-08 04:54:08.087687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4112 vulnerable 2026-06-08 04:51:47.067634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0786 vulnerable 2026-06-08 04:50:17.776604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0785 vulnerable 2026-06-08 04:50:17.775816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0784 vulnerable 2026-06-08 04:50:17.774993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0783 vulnerable 2026-06-08 04:50:17.771709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.