Approved changes feed: RSS · Atom

cpe:2.3:a:cacti:cacti:0.8.2a:*:*:*:*:*:*:*

part: a version: 0.8.2a update: *

VendorCacti (e6763402-5d6e-5742-a2a8-4d1f80e2547b)
ProductCacti (7f9724ce-de8d-5e88-b014-4015b431cbe4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cacti purl2cpe 2026-06-01 10:18:17.917794
pkg:deb/ubuntu/cacti purl2cpe 2026-06-01 10:18:17.917795
pkg:github/cacti/cacti purl2cpe 2026-06-01 10:18:17.917796
pkg:rpm/fedora/cacti purl2cpe 2026-06-01 10:18:17.917798
pkg:rpm/opensuse/cacti purl2cpe 2026-06-01 10:18:17.917799

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5589 vulnerable 2026-06-08 05:04:52.315005 Details available
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Published: 2013-08-29T10:00:00.000Z
Updated: 2024-08-06T17:15:21.449Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5588 vulnerable 2026-06-08 05:04:52.297315 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the step parameter to install/index.php or (2) the id parameter to cacti/host.php.
Published: 2013-08-29T10:00:00.000Z
Updated: 2024-08-06T17:15:21.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1435 vulnerable 2026-06-08 05:03:53.953827 Details available
(1) snmp.php and (2) rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-08-06T15:04:48.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4824 vulnerable 2026-06-08 04:59:33.179503 Details available
SQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL commands via the login_username parameter.
Published: 2011-12-15T02:00:00.000Z
Updated: 2024-08-07T00:16:34.974Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2545 vulnerable 2026-06-08 04:55:08.648561 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via (1) the name element in an XML template to templates_import.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via vectors related to (2) cdef.php, (3) data_input.php, (4) data_queries.php, (5) data_sources.php, (6) data_templates.php, (7) gprint_presets.php, (8) graph.php, (9) graphs_new.php, (10) graphs.php, (11) graph_templates_inputs.php, (12) graph_templates_items.php, (13) graph_templates.php, (14) graph_view.php, (15) host.php, (16) host_templates.php, (17) lib/functions.php, (18) lib/html_form.php, (19) lib/html_form_template.php, (20) lib/html.php, (21) lib/html_tree.php, (22) lib/rrd.php, (23) rra.php, (24) tree.php, and (25) user_admin.php.
Published: 2010-08-23T20:00:00.000Z
Updated: 2024-08-07T02:39:37.346Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2544 vulnerable 2026-06-08 04:55:08.647022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2543 vulnerable 2026-06-08 04:55:08.632066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2092 vulnerable 2026-06-08 04:54:11.631922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1645 vulnerable 2026-06-08 04:54:09.623522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1644 vulnerable 2026-06-08 04:54:09.622405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1431 vulnerable 2026-06-08 04:54:08.079327 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4112 vulnerable 2026-06-08 04:51:47.064669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0786 vulnerable 2026-06-08 04:50:17.776503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0785 vulnerable 2026-06-08 04:50:17.775717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0784 vulnerable 2026-06-08 04:50:17.774896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0783 vulnerable 2026-06-08 04:50:17.768639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.