CVE-2005-1524

2005-06-2204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-1524

php

file inclusion

cacti

7.3 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.023 Low

EPSS

Percentile

89.6%

JSON

PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the config[library_path] parameter.

CPENameOperatorVersion
the_cacti_group:cactithe cacti group cactieq0.5
the_cacti_group:cactithe cacti group cactieq0.6.7
the_cacti_group:cactithe cacti group cactieq0.8.2a
the_cacti_group:cactithe cacti group cactieq0.6.4
the_cacti_group:cactithe cacti group cactieq0.6.1
the_cacti_group:cactithe cacti group cactieq0.6
the_cacti_group:cactithe cacti group cactieq0.8.3a
the_cacti_group:cactithe cacti group cactieq0.8
the_cacti_group:cactithe cacti group cactieq0.6.6
the_cacti_group:cactithe cacti group cactile0.8.6d

CPE	Name	Operator	Version
the_cacti_group:cacti	the cacti group cacti	eq	0.5
the_cacti_group:cacti	the cacti group cacti	eq	0.6.7
the_cacti_group:cacti	the cacti group cacti	eq	0.8.2a
the_cacti_group:cacti	the cacti group cacti	eq	0.6.4
the_cacti_group:cacti	the cacti group cacti	eq	0.6.1
the_cacti_group:cacti	the cacti group cacti	eq	0.6
the_cacti_group:cacti	the cacti group cacti	eq	0.8.3a
the_cacti_group:cacti	the cacti group cacti	eq	0.8
the_cacti_group:cacti	the cacti group cacti	eq	0.6.6
the_cacti_group:cacti	the cacti group cacti	le	0.8.6d