PT-2023-9153

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.27 Description The issue is related to the lack of protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting XSS attack and execute arbitrary code. The vulnerable component i...

PT-2023-4943

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.25 Description The issue is a Stored Cross-Site-Scripting XSS vulnerability that allows an authenticated user to poison data. It is found in the graphs new.php file. Several validations are performed, but the return...

PT-2016-3930

Name of the Vulnerable Software and Affected Versions Cacti versions 0.8.8f and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the cg g parameter in a save action. The host new graphs function in graphs new.php is the...

PT-2015-7780

Name of the Vulnerable Software and Affected Versions Cacti versions 0.8.8f and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved by sending crafted serialized data in the selected graphs array parameter in a save action, exploitin...