Patchwire CVEs, their patch status, and feeds to follow them

CVE-2011-4824

Fixed in a distro release EPSS 2%

SQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL commands via the login_username parameter.

Published 2011-12-15 · CVE record · OSV

Products: cacti

Distro releases

ReleasePackageFixed in
Debian 12cacti0.8.7i-1
Debian 13cacti0.8.7i-1
Debian 14cacti0.8.7i-1
Debian 5.0cacti0.8.7b-2.1+lenny4
Debian 6.0cacti0.8.7g-1+squeeze1