Approved changes feed: RSS · Atom

cpe:2.3:a:cacti:cacti:0.8.6b:*:*:*:*:*:*:*

part: a version: 0.8.6b update: *

VendorCacti (e6763402-5d6e-5742-a2a8-4d1f80e2547b)
ProductCacti (7f9724ce-de8d-5e88-b014-4015b431cbe4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cacti purl2cpe 2026-06-01 10:18:17.917848
pkg:deb/ubuntu/cacti purl2cpe 2026-06-01 10:18:17.917850
pkg:github/cacti/cacti purl2cpe 2026-06-01 10:18:17.917851
pkg:rpm/fedora/cacti purl2cpe 2026-06-01 10:18:17.917852
pkg:rpm/opensuse/cacti purl2cpe 2026-06-01 10:18:17.917854

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5589 vulnerable 2026-06-08 05:04:52.315143 Details available
SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Published: 2013-08-29T10:00:00.000Z
Updated: 2024-08-06T17:15:21.449Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5588 vulnerable 2026-06-08 05:04:52.301598 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the step parameter to install/index.php or (2) the id parameter to cacti/host.php.
Published: 2013-08-29T10:00:00.000Z
Updated: 2024-08-06T17:15:21.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1435 vulnerable 2026-06-08 05:03:53.955598 Details available
(1) snmp.php and (2) rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-08-06T15:04:48.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1434 vulnerable 2026-06-08 05:03:53.940868 Details available
Multiple SQL injection vulnerabilities in (1) api_poller.php and (2) utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-08-06T15:04:48.321Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5223 vulnerable 2026-06-08 04:59:35.204846 Details available
Cross-site request forgery (CSRF) vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Published: 2012-10-25T17:00:00.000Z
Updated: 2024-08-07T00:30:46.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4824 vulnerable 2026-06-08 04:59:33.184778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2545 vulnerable 2026-06-08 04:55:08.648767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2544 vulnerable 2026-06-08 04:55:08.647163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2543 vulnerable 2026-06-08 04:55:08.637478 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2092 vulnerable 2026-06-08 04:54:11.632073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1645 vulnerable 2026-06-08 04:54:09.623649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1644 vulnerable 2026-06-08 04:54:09.622543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1431 vulnerable 2026-06-08 04:54:08.087217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.