Lucene search
HistoryAug 16, 2004 - 4:00 a.m.
CVE-2004-1737
cve-2004-1737
sql injection
cacti 0.8.5a
authentication bypass
remote attack
8.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
68.0%
SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters.
Related
openvas
openvas
Gentoo Security Advisory GLSA 200408-21 (cacti)
2008-09-24 00:00:00
FreeBSD Ports: cacti
2008-09-04 00:00:00
nessus
nessus
GLSA-200408-21 : Cacti: SQL injection vulnerability
2004-08-30 00:00:00
gentoo
gentoo
Cacti: SQL injection vulnerability
2004-08-23 00:00:00
debiancve
debiancve
CVE-2004-1737
2004-08-16 04:00:00
8.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
68.0%
Related for CVE-2004-1737