CVE-2005-1526
Fixed in a distro release EPSS 17%
PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[include_path] parameter.
Products: the_cacti_group cacti
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cacti | 0.8.6e-1 |
| Debian 13 | cacti | 0.8.6e-1 |
| Debian 14 | cacti | 0.8.6e-1 |
| Debian 3.0 | cacti | 0.6.7-2.5 |
| Debian 3.1 | cacti | 0.8.6c-7sarge2 |