CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-2149

config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session information to gain privileges and disable the use of addslashes to conduct SQL injection attacks.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.013

EPSS Ranking 78.7%

CVSS Severity

CVSS v2 Score 10.0

References

Products affected by CVE-2005-2149

The Cacti Group » Cacti » Version: 0.8

cpe:2.3:a:the_cacti_group:cacti:0.8
The Cacti Group » Cacti » Version: 0.8.1

cpe:2.3:a:the_cacti_group:cacti:0.8.1
The Cacti Group » Cacti » Version: 0.8.2

cpe:2.3:a:the_cacti_group:cacti:0.8.2
The Cacti Group » Cacti » Version: 0.8.2a

cpe:2.3:a:the_cacti_group:cacti:0.8.2a
The Cacti Group » Cacti » Version: 0.8.3

cpe:2.3:a:the_cacti_group:cacti:0.8.3
The Cacti Group » Cacti » Version: 0.8.3a

cpe:2.3:a:the_cacti_group:cacti:0.8.3a
The Cacti Group » Cacti » Version: 0.8.4

cpe:2.3:a:the_cacti_group:cacti:0.8.4
The Cacti Group » Cacti » Version: 0.8.5

cpe:2.3:a:the_cacti_group:cacti:0.8.5
The Cacti Group » Cacti » Version: 0.8.5a

cpe:2.3:a:the_cacti_group:cacti:0.8.5a
The Cacti Group » Cacti » Version: 0.8.6

cpe:2.3:a:the_cacti_group:cacti:0.8.6
The Cacti Group » Cacti » Version: 0.8.6a

cpe:2.3:a:the_cacti_group:cacti:0.8.6a
The Cacti Group » Cacti » Version: 0.8.6b

cpe:2.3:a:the_cacti_group:cacti:0.8.6b
The Cacti Group » Cacti » Version: 0.8.6c

cpe:2.3:a:the_cacti_group:cacti:0.8.6c
The Cacti Group » Cacti » Version: 0.8.6d

cpe:2.3:a:the_cacti_group:cacti:0.8.6d
The Cacti Group » Cacti » Version: 0.8.6e

cpe:2.3:a:the_cacti_group:cacti:0.8.6e

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-2149

Products

Pricing

Contact Us