CVE-2013-5588: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the step parameter to install/index.php or 2 the id parameter to cacti/host.php...

PT-2013-5659

Name of the Vulnerable Software and Affected Versions Cacti versions 0.8.8b and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters. For example, the...

PT-2013-5660

Name of the Vulnerable Software and Affected Versions Cacti versions 0.8.8b and earlier Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the "cacti/host.php" endpoint. This could potentially lead to unauthorized access or manipulation of data...

CVE-2013-5589: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...