CVE-2005-1525

2005-06-2204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-1525

sql injection

cacti

config_settings.php

nvd

8.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.6%

JSON

SQL injection vulnerability in config_settings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter.

CPENameOperatorVersion
the_cacti_group:cactithe cacti group cactieq0.5
the_cacti_group:cactithe cacti group cactieq0.6.7
the_cacti_group:cactithe cacti group cactieq0.8.2a
the_cacti_group:cactithe cacti group cactieq0.6.4
the_cacti_group:cactithe cacti group cactieq0.6.1
the_cacti_group:cactithe cacti group cactieq0.6
the_cacti_group:cactithe cacti group cactieq0.8.3a
the_cacti_group:cactithe cacti group cactieq0.8
the_cacti_group:cactithe cacti group cactieq0.6.6
the_cacti_group:cactithe cacti group cactile0.8.6d

CPE	Name	Operator	Version
the_cacti_group:cacti	the cacti group cacti	eq	0.5
the_cacti_group:cacti	the cacti group cacti	eq	0.6.7
the_cacti_group:cacti	the cacti group cacti	eq	0.8.2a
the_cacti_group:cacti	the cacti group cacti	eq	0.6.4
the_cacti_group:cacti	the cacti group cacti	eq	0.6.1
the_cacti_group:cacti	the cacti group cacti	eq	0.6
the_cacti_group:cacti	the cacti group cacti	eq	0.8.3a
the_cacti_group:cacti	the cacti group cacti	eq	0.8
the_cacti_group:cacti	the cacti group cacti	eq	0.6.6
the_cacti_group:cacti	the cacti group cacti	le	0.8.6d