DEBIAN-CVE-2022-41444

Cross Site Scripting XSS vulnerability in Cacti 1.2.21 via crafted POST request to graphsnew.php...

Authentication flaw

In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cactildapauth allows a zero as the password...

UBUNTU-CVE-2022-48538

In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cactildapauth allows a zero as the password...

UBUNTU-CVE-2022-41444

Cross Site Scripting XSS vulnerability in Cacti 1.2.21 via crafted POST request to graphsnew.php...

UBUNTU-CVE-2022-48547

A reflected cross-site scripting XSS vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML in the "ref" parameter at authchangepassword.php...

Cross site scripting

Cross Site Scripting XSS vulnerability in Cacti 1.2.21 via crafted POST request to graphsnew.php...

CVE-2022-41444

Cross Site Scripting XSS vulnerability in Cacti 1.2.21 via crafted POST request to graphsnew.php...

CVE-2022-48538

In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cactildapauth allows a zero as the password...

Cross site scripting

A reflected cross-site scripting XSS vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML in the "ref" parameter at authchangepassword.php...

CVE-2022-41444

Cross Site Scripting XSS vulnerability in Cacti 1.2.21 via crafted POST request to graphsnew.php...

Cacti 跨站脚本漏洞

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data through snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A cross-site scripting vulnerability exists in Cacti version 1.2.19,...

Cacti 跨站脚本漏洞

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A cross-site scripting vulnerability exists in Cacti 0.8.7g and earlier...

CVE-2022-41444

Cross Site Scripting XSS vulnerability in Cacti 1.2.21 via crafted POST request to graphsnew.php...

CVE-2022-48538

In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cactildapauth allows a zero as the password...

CVE-2022-41444

CVE-2022-41444 denotes a Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 triggered by a crafted POST to graphs_new.php. According to the linked sources, the impact is limited to confidentiality and integrity (low) with no availability impact, and the attack requires network access and us...

CVE-2022-48538

In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cactildapauth allows a zero as the password...

PT-2023-5430 · Cacti · Cacti

Name of the Vulnerable Software and Affected Versions: Cacti versions 0.8.7g and earlier Description: A reflected cross-site scripting XSS vulnerability allows unauthenticated remote attackers to inject arbitrary web script or HTML in the ref parameter at "auth changepassword.php". This issue is...

CVE-2022-48547

CVE-2022-48547 is a reflected XSS vulnerability in Cacti versions up to 0.8.7g, allowing unauthenticated remote attackers to inject arbitrary script/HTML into the ref parameter of auth_changepassword.php. The issue is documented across multiple sources (NVD, OSV, Nessus/NASL) with the affected so...

CVE-2022-41444

Cross Site Scripting XSS vulnerability in Cacti 1.2.21 via crafted POST request to graphsnew.php...

CVE-2022-48538

CVE-2022-48538 affects Cacti 1.2.19. The issue is an authentication bypass in the web login due to improper validation in the PHP function cacti_ldap_auth(), which allows a zero as the password. The available documents describe this bypass but do not provide attack vectors, exploit details, affec...