GCVE - cpe:2.3:a:cacti:cacti:0.6.8:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cacti:cacti:0.6.8:*:*:*:*:*:*:*

part: a version: 0.6.8 update: *

Vendor	Cacti (`e6763402-5d6e-5742-a2a8-4d1f80e2547b`)
Product	Cacti (`7f9724ce-de8d-5e88-b014-4015b431cbe4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/cacti`	purl2cpe	2026-06-01 10:18:17.904162
`pkg:deb/ubuntu/cacti`	purl2cpe	2026-06-01 10:18:17.904164
`pkg:github/cacti/cacti`	purl2cpe	2026-06-01 10:18:17.904165
`pkg:rpm/fedora/cacti`	purl2cpe	2026-06-01 10:18:17.904167
`pkg:rpm/opensuse/cacti`	purl2cpe	2026-06-01 10:18:17.904168

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-5223`	vulnerable	2026-06-08 04:59:35.204636	Details available Cross-site request forgery (CSRF) vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Published: 2012-10-25T17:00:00.000Z Updated: 2024-08-07T00:30:46.799Z Open on db.gcve.eu Reference links http://bugs.cacti.net/view.php?id=2062 http://secunia.com/advisories/47195 http://forums.cacti.net/viewtopic.php?f=4&t=45871 http://forums.cacti.net/viewtopic.php?f=21&t=44116 https://exchange.xforce.ibmcloud.com/vulnerabilities/71792	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4824`	vulnerable	2026-06-08 04:59:33.175896	Details available SQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL commands via the login_username parameter. Published: 2011-12-15T02:00:00.000Z Updated: 2024-08-07T00:16:34.974Z Open on db.gcve.eu Reference links http://bugs.cacti.net/view.php?id=2062 http://secunia.com/advisories/46876 http://forums.cacti.net/viewtopic.php?f=21&t=44116 http://www.securityfocus.com/bid/50671 http://www.cacti.net/release_notes_0_8_7h.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2545`	vulnerable	2026-06-08 04:55:08.648481	Details available Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via (1) the name element in an XML template to templates_import.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via vectors related to (2) cdef.php, (3) data_input.php, (4) data_queries.php, (5) data_sources.php, (6) data_templates.php, (7) gprint_presets.php, (8) graph.php, (9) graphs_new.php, (10) graphs.php, (11) graph_templates_inputs.php, (12) graph_templates_items.php, (13) graph_templates.php, (14) graph_view.php, (15) host.php, (16) host_templates.php, (17) lib/functions.php, (18) lib/html_form.php, (19) lib/html_form_template.php, (20) lib/html.php, (21) lib/html_tree.php, (22) lib/rrd.php, (23) rra.php, (24) tree.php, and (25) user_admin.php. Published: 2010-08-23T20:00:00.000Z Updated: 2024-08-07T02:39:37.346Z Open on db.gcve.eu Reference links http://svn.cacti.net/viewvc?view=rev&revision=6041 http://www.mandriva.com/security/advisories?name=MDVSA-2010:160 http://www.securityfocus.com/bid/42575 http://secunia.com/advisories/41041 http://marc.info/?l=oss-security&m=127978954522586&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2544`	vulnerable	2026-06-08 04:55:08.646931	Details available Cross-site scripting (XSS) vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote attackers to inject arbitrary web script or HTML via the filter parameter. Published: 2010-08-23T20:00:00.000Z Updated: 2024-08-07T02:39:37.367Z Open on db.gcve.eu Reference links http://svn.cacti.net/viewvc/cacti/branches/0.8.7/utilities.php?r1=6025&r2=6024&pathrev=6025 http://www.mandriva.com/security/advisories?name=MDVSA-2010:160 http://www.securityfocus.com/bid/42575 http://secunia.com/advisories/41041 http://marc.info/?l=oss-security&m=127978954522586&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2543`	vulnerable	2026-06-08 04:55:08.628790	Details available Cross-site scripting (XSS) vulnerability in include/top_graph_header.php in Cacti before 0.8.7g allows remote attackers to inject arbitrary web script or HTML via the graph_start parameter to graph.php. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-4032.2.b. Published: 2010-08-23T20:00:00.000Z Updated: 2024-08-07T02:39:37.047Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2010:160 http://marc.info/?l=oss-security&m=127978954522586&w=2 https://bugzilla.redhat.com/show_bug.cgi?id=541279 http://cacti.net/release_notes_0_8_7g.php http://marc.info/?l=oss-security&m=128017203704299&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2092`	vulnerable	2026-06-08 04:54:11.631828	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1645`	vulnerable	2026-06-08 04:54:09.623443	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1644`	vulnerable	2026-06-08 04:54:09.622321	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1431`	vulnerable	2026-06-08 04:54:08.076665	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.