SUSE CVE-2009-4032

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 graph.php, 2 include/topgraphheader.php, 3 lib/htmlform.php, and 4 lib/timespansettings.php, as demonstrated by the a graphend or b graphstart...

CVE-2014-5261

The graph settings script graphsettings.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related to the rrdtool commandline in lib/rrd.php...

CVE-2014-5261

CVE-2014-5261 affects Cacti (web GUI) up to version 0.8.8b and earlier, where graph_settings.php allows remote command execution via shell metacharacters in a font size parameter, linked to rrdtool usage in lib/rrd.php. This can enable remote code execution with network attack vector and no authe...