GCVE - cpe:2.3:a:cacti:cacti:0.8.7h:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cacti:cacti:0.8.7h:*:*:*:*:*:*:*

part: a version: 0.8.7h update: *

Vendor	Cacti (`e6763402-5d6e-5742-a2a8-4d1f80e2547b`)
Product	Cacti (`7f9724ce-de8d-5e88-b014-4015b431cbe4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/cacti`	purl2cpe	2026-06-01 10:18:17.917972
`pkg:deb/ubuntu/cacti`	purl2cpe	2026-06-01 10:18:17.917973
`pkg:github/cacti/cacti`	purl2cpe	2026-06-01 10:18:17.917974
`pkg:rpm/fedora/cacti`	purl2cpe	2026-06-01 10:18:17.917976
`pkg:rpm/opensuse/cacti`	purl2cpe	2026-06-01 10:18:17.917977

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-5589`	vulnerable	2026-06-08 05:04:52.315455	Details available SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Published: 2013-08-29T10:00:00.000Z Updated: 2024-08-06T17:15:21.449Z Open on db.gcve.eu Reference links http://secunia.com/advisories/54652 http://www.debian.org/security/2013/dsa-2747 http://bugs.cacti.net/view.php?id=2383 http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.html http://www.securityfocus.com/bid/62005	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5588`	vulnerable	2026-06-08 05:04:52.311736	Details available Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the step parameter to install/index.php or (2) the id parameter to cacti/host.php. Published: 2013-08-29T10:00:00.000Z Updated: 2024-08-06T17:15:21.368Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/62001 http://secunia.com/advisories/54652 http://www.debian.org/security/2013/dsa-2747 http://bugs.cacti.net/view.php?id=2383 http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1435`	vulnerable	2026-06-08 05:03:53.960049	Details available (1) snmp.php and (2) rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. Published: 2013-08-23T16:00:00.000Z Updated: 2024-08-06T15:04:48.269Z Open on db.gcve.eu Reference links http://secunia.com/advisories/54181 http://svn.cacti.net/viewvc?view=rev&revision=7392 http://lists.opensuse.org/opensuse-updates/2013-08/msg00053.html http://www.debian.org/security/2012/dsa-2739 http://secunia.com/advisories/54386	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.