Approved changes feed: RSS · Atom

cpe:2.3:a:cacti:cacti:0.8.7a:*:*:*:*:*:*:*

part: a version: 0.8.7a update: *

VendorCacti (e6763402-5d6e-5742-a2a8-4d1f80e2547b)
ProductCacti (7f9724ce-de8d-5e88-b014-4015b431cbe4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cacti purl2cpe 2026-06-01 10:18:17.917923
pkg:deb/ubuntu/cacti purl2cpe 2026-06-01 10:18:17.917925
pkg:github/cacti/cacti purl2cpe 2026-06-01 10:18:17.917926
pkg:rpm/fedora/cacti purl2cpe 2026-06-01 10:18:17.917928
pkg:rpm/opensuse/cacti purl2cpe 2026-06-01 10:18:17.917929

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5262 vulnerable 2026-06-08 05:05:47.351931 Details available
SQL injection vulnerability in the graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2014-08-22T14:00:00.000Z
Updated: 2024-08-06T11:41:48.329Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5261 vulnerable 2026-06-08 05:05:47.346441 Details available
The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related to the rrdtool commandline in lib/rrd.php.
Published: 2014-08-22T14:00:00.000Z
Updated: 2024-08-06T11:41:47.992Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5589 vulnerable 2026-06-08 05:04:52.315336 Details available
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Published: 2013-08-29T10:00:00.000Z
Updated: 2024-08-06T17:15:21.449Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5588 vulnerable 2026-06-08 05:04:52.307248 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the step parameter to install/index.php or (2) the id parameter to cacti/host.php.
Published: 2013-08-29T10:00:00.000Z
Updated: 2024-08-06T17:15:21.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1435 vulnerable 2026-06-08 05:03:53.955786 Details available
(1) snmp.php and (2) rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-08-06T15:04:48.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1434 vulnerable 2026-06-08 05:03:53.947283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5223 vulnerable 2026-06-08 04:59:35.205023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4824 vulnerable 2026-06-08 04:59:33.190990 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2545 vulnerable 2026-06-08 04:55:08.648946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2544 vulnerable 2026-06-08 04:55:08.647446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2543 vulnerable 2026-06-08 04:55:08.643132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2092 vulnerable 2026-06-08 04:54:11.632261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1645 vulnerable 2026-06-08 04:54:09.623806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1644 vulnerable 2026-06-08 04:54:09.622706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1431 vulnerable 2026-06-08 04:54:08.092295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4112 vulnerable 2026-06-08 04:51:47.069784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0786 vulnerable 2026-06-08 04:50:17.776687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0785 vulnerable 2026-06-08 04:50:17.775899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0784 vulnerable 2026-06-08 04:50:17.775077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0783 vulnerable 2026-06-08 04:50:17.774180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.