GCVE - cpe:2.3:a:cacti:cacti:0.5:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cacti:cacti:0.5:-:*:*:*:*:*:*

part: a version: 0.5 update: -

Vendor	Cacti (`e6763402-5d6e-5742-a2a8-4d1f80e2547b`)
Product	Cacti (`7f9724ce-de8d-5e88-b014-4015b431cbe4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/cacti`	purl2cpe	2026-06-01 10:18:17.889929
`pkg:deb/ubuntu/cacti`	purl2cpe	2026-06-01 10:18:17.889930
`pkg:github/cacti/cacti`	purl2cpe	2026-06-01 10:18:17.889932
`pkg:rpm/fedora/cacti`	purl2cpe	2026-06-01 10:18:17.889933
`pkg:rpm/opensuse/cacti`	purl2cpe	2026-06-01 10:18:17.889935

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4824`	vulnerable	2026-06-08 04:59:33.169977	Details available SQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL commands via the login_username parameter. Published: 2011-12-15T02:00:00.000Z Updated: 2024-08-07T00:16:34.974Z Open on db.gcve.eu Reference links http://bugs.cacti.net/view.php?id=2062 http://secunia.com/advisories/46876 http://forums.cacti.net/viewtopic.php?f=21&t=44116 http://www.securityfocus.com/bid/50671 http://www.cacti.net/release_notes_0_8_7h.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2545`	vulnerable	2026-06-08 04:55:08.648325	Details available Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via (1) the name element in an XML template to templates_import.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via vectors related to (2) cdef.php, (3) data_input.php, (4) data_queries.php, (5) data_sources.php, (6) data_templates.php, (7) gprint_presets.php, (8) graph.php, (9) graphs_new.php, (10) graphs.php, (11) graph_templates_inputs.php, (12) graph_templates_items.php, (13) graph_templates.php, (14) graph_view.php, (15) host.php, (16) host_templates.php, (17) lib/functions.php, (18) lib/html_form.php, (19) lib/html_form_template.php, (20) lib/html.php, (21) lib/html_tree.php, (22) lib/rrd.php, (23) rra.php, (24) tree.php, and (25) user_admin.php. Published: 2010-08-23T20:00:00.000Z Updated: 2024-08-07T02:39:37.346Z Open on db.gcve.eu Reference links http://svn.cacti.net/viewvc?view=rev&revision=6041 http://www.mandriva.com/security/advisories?name=MDVSA-2010:160 http://www.securityfocus.com/bid/42575 http://secunia.com/advisories/41041 http://marc.info/?l=oss-security&m=127978954522586&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2544`	vulnerable	2026-06-08 04:55:08.646620	Details available Cross-site scripting (XSS) vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote attackers to inject arbitrary web script or HTML via the filter parameter. Published: 2010-08-23T20:00:00.000Z Updated: 2024-08-07T02:39:37.367Z Open on db.gcve.eu Reference links http://svn.cacti.net/viewvc/cacti/branches/0.8.7/utilities.php?r1=6025&r2=6024&pathrev=6025 http://www.mandriva.com/security/advisories?name=MDVSA-2010:160 http://www.securityfocus.com/bid/42575 http://secunia.com/advisories/41041 http://marc.info/?l=oss-security&m=127978954522586&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2543`	vulnerable	2026-06-08 04:55:08.622335	Details available Cross-site scripting (XSS) vulnerability in include/top_graph_header.php in Cacti before 0.8.7g allows remote attackers to inject arbitrary web script or HTML via the graph_start parameter to graph.php. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-4032.2.b. Published: 2010-08-23T20:00:00.000Z Updated: 2024-08-07T02:39:37.047Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2010:160 http://marc.info/?l=oss-security&m=127978954522586&w=2 https://bugzilla.redhat.com/show_bug.cgi?id=541279 http://cacti.net/release_notes_0_8_7g.php http://marc.info/?l=oss-security&m=128017203704299&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2092`	vulnerable	2026-06-08 04:54:11.631649	Details available SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a valid rra_id value in a POST request or a cookie, which causes the POST or cookie value to bypass the validation routine, but inserts the $_GET value into the resulting query. Published: 2010-05-27T22:00:00.000Z Updated: 2024-08-07T02:17:14.490Z Open on db.gcve.eu Reference links http://www.cacti.net/changelog.php http://www.debian.org/security/2010/dsa-2060 http://secunia.com/advisories/41041 https://rhn.redhat.com/errata/RHSA-2010-0635.html http://www.vupen.com/english/advisories/2010/2132	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1645`	vulnerable	2026-06-08 04:54:09.623289	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1644`	vulnerable	2026-06-08 04:54:09.622160	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1431`	vulnerable	2026-06-08 04:54:08.071615	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.