CVE-2005-1524
Fixed in a distro release EPSS 16%
PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the config[library_path] parameter.
Products: the_cacti_group cacti
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cacti | 0.8.6e-1 |
| Debian 13 | cacti | 0.8.6e-1 |
| Debian 14 | cacti | 0.8.6e-1 |
| Debian 3.0 | cacti | 0.6.7-2.5 |
| Debian 3.1 | cacti | 0.8.6c-7sarge2 |