RaXnet Cacti 0.5/0.6.x/0.8.x - 'Graph_Image.php' Remote Command Execution Variant

source: https://www.securityfocus.com/bid/14129/info RaXnet Cacti is prone to a remote command execution vulnerability that manifests in the 'graphimage.php' script. The issue is due to a bug in the input filters that leads to a failure in the application to properly sanitize user-supplied input...

Remote Command Execution Exploit for Cacti <= 0.8.6d

!/usr/bin/perl Remote Command Execution Exploit for Cacti = 0.8.6d This exploit open a remote shell on the targets that uses Cacti TARGET HOST MUST BE A GNU/LINUX SERVER, if not: manual exploiting -- http://www.example.com/cacti/graphimage.php?localgraphid=validvalue&gr aphstart=0acommand0a Patch...

GLSA-200506-20 : Cacti: Several vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200506-20 Cacti: Several vulnerabilities Cacti fails to properly sanitize input which can lead to SQL injection, authentication bypass as well as PHP file inclusion. Impact : An attacker could potentially exploit the file inclusio...

cacti.pl.txt

!/usr/bin/perl Remote Command Execution Exploit for Cacti http://www.example.com/cacti/graphimage.php?localgraphid=validvalue&graphstart=%0acommand%0a Patch: download the last version http://www.cacti.net/downloadcacti.php Discovered and Coded by Alberto Trivero use LWP::Simple; print...

CVE-2005-1525

SQL injection vulnerability in configsettings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-1525

CVE-2005-1525 is an SQL injection vulnerability in Cacti prior to 0.8.6e. The issue affects the config_settings.php file, where the id parameter allows remote attackers to execute arbitrary SQL commands. This is a remote code execution risk through database manipulation resulting from improper in...

CVE-2005-1526

PHP remote file inclusion vulnerability in configsettings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the configincludepath parameter...

CVE-2005-1525

SQL injection vulnerability in configsettings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-1526

PHP remote file inclusion vulnerability in configsettings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the configincludepath parameter...

CVE-2005-1526

CVE-2005-1526 is a PHP remote file inclusion/input validation vulnerability in Cacti before 0.8.6e, where an attacker could include remote PHP code via config[include_path] in config_settings.php and execute arbitrary code. Multiple connected advisories (Debian DSA-764-1 and GLSA/OpenVAS entries)...

DEBIAN-CVE-2005-1526

PHP remote file inclusion vulnerability in configsettings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the configincludepath parameter...

CVE-2005-1525

SQL injection vulnerability in configsettings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-1524

PHP file inclusion vulnerability in topgraphheader.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the configlibrarypath parameter...

CVE-2005-1524

PHP file inclusion vulnerability in topgraphheader.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the configlibrarypath parameter...

CVE-2005-1526

PHP remote file inclusion vulnerability in configsettings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the configincludepath parameter...

DEBIAN-CVE-2005-1525

SQL injection vulnerability in configsettings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-1524

CVE-2005-1524 affects Cacti 0.8.6d and earlier; a PHP file inclusion vulnerability in top_graph_header.php can allow remote code execution via config[library_path]. Related advisories also cover CVE-2005-1525 and CVE-2005-1526 (SQL/inclusion flaws) with patches in later releases. Debian/OSS advis...

CVE-2005-1525

SQL injection vulnerability in configsettings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-1524

PHP file inclusion vulnerability in topgraphheader.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the configlibrarypath parameter...

CVE-2005-1526

PHP remote file inclusion vulnerability in configsettings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the configincludepath parameter...