PT-2013-3136

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 0.8.8b Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors, specifically in the snmp.php and rrd.php files. Recommendations For versions prior to...

CVE-2013-1435: Improper Control of Generation of Code

1 snmp.php and 2 rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

CVE-2010-2545

Cacti before 0.8.7g contains multiple XSS vulnerabilities (including CVE-2010-2545) in various templates and admin paths. The GLSA notes remote script injection and the need to upgrade to the 0.8.8+ series as remediation; affected vectors include template name and numerous PHP/graph-related compo...