PT-2023-5427

Name of the Vulnerable Software and Affected Versions Cacti version 1.2.24 Description The issue is related to the use of open redirection in the auth changepassword.php component of the Cacti network monitoring software. This can allow a remote attacker to redirect a user to an arbitrary URL. Th...

PT-2022-9718

Name of the Vulnerable Software and Affected Versions Cacti versions affected versions not specified Description The issue allows an unauthenticated remote user to execute a JavaScript payload by visiting a specific URL. This is achieved by injecting the payload into the ref URL parameter in the...