CVE-2005-2148
- State
- Published
- Severity
- Not scored
- Published
- Jul 6, 2005
- Updated
- Aug 7, 2024
- Reserved
- Jul 6, 2005
Description
Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary commands or SQL by sending a legitimate value in a POST request or cookie, then specifying the attack string in the URL, which causes the get_request_var function to return the wrong value in the $_REQUEST variable, which is cleansed while the original malicious $_GET value remains unmodified, as demonstrated in (1) graph_image.php and (2) graph.php.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://www.cacti.net/downloads/patches/0.8.6e/cacti-0.8.6f_security.patch
- cacti-request-array-command-execution(21270)vdb-entry
- http://www.hardened-php.net/advisory-032005.php
- 20050702 Advisory 04/2005: Cacti Remote Command Execution Vulnerabilitymailing-list
- 20050702 Advisory 03/2005: Cacti Multiple SQL Injection Vulnerabilities [FIXED]mailing-list
- [cacti-announce] 20050701 Cacti 0.8.6f Releasedmailing-list
- cacti-graph-post-cookie-sql-injection(21266)vdb-entry
- ADV-2005-0951vdb-entry
- DSA-764vendor-advisory
- 14128vdb-entry
- 15490third-party-advisory
- 1014361vdb-entry
- 14129vdb-entry
- http://www.hardened-php.net/advisory-042005.php
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.