CVE-2006-6799

2006-12-2800:00:00

ubuntu.com

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.3%

JSON

SQL injection vulnerability in Cacti 0.8.6i and earlier, when
register_argc_argv is enabled, allows remote attackers to execute arbitrary
SQL commands via the (1) second or (2) third arguments to cmd.php. NOTE:
this issue can be leveraged to execute arbitrary commands since the SQL
query results are later used in the polling_items array and popen function.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchcacti< 0.8.6h-1ubuntu3.1UNKNOWN
ubuntu6.10noarchcacti< 0.8.6h-3ubuntu0.1UNKNOWN
ubuntu7.04noarchcacti< 0.8.6i-3UNKNOWN