CVE-2005-1524

medium · 5

PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the config[library_path] parameter.

CVSS

15.9%

EPSS (exploit prob.)

97th

EPSS percentile

2005-06-22

Published

AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

Vendor	Product	Affected versions
the_cacti_group	cacti	<= 0.8.6d
the_cacti_group	cacti	0.5
the_cacti_group	cacti	0.6
the_cacti_group	cacti	0.6.1
the_cacti_group	cacti	0.6.2
the_cacti_group	cacti	0.6.3
the_cacti_group	cacti	0.6.4
the_cacti_group	cacti	0.6.5
the_cacti_group	cacti	0.6.6
the_cacti_group	cacti	0.6.7
the_cacti_group	cacti	0.6.8
the_cacti_group	cacti	0.6.8a
the_cacti_group	cacti	0.8
the_cacti_group	cacti	0.8.1
the_cacti_group	cacti	0.8.2
the_cacti_group	cacti	0.8.2a
the_cacti_group	cacti	0.8.3
the_cacti_group	cacti	0.8.3a
the_cacti_group	cacti	0.8.4
the_cacti_group	cacti	0.8.5a

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-1524