CVEvulnerability

CVE-2005-2148

7.5 HIGH Published 2005-07-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-07-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary commands or SQL by sending a legitimate value in a POST request or cookie, then specifying the attack string in the URL, which causes the get_request_var function to return the wrong value in the $_REQUEST variable, which is cleansed while the original malicious $_GET value remains unmodified, as demonstrated in (1) graph_image.php and (2) graph.php.

Affected configurations

• the cacti group cacti 0.8 • the cacti group cacti 0.8.1 • the cacti group cacti 0.8.2 • the cacti group cacti 0.8.2a • the cacti group cacti 0.8.3 • the cacti group cacti 0.8.3a • the cacti group cacti 0.8.4 • the cacti group cacti 0.8.5 • the cacti group cacti 0.8.5a • the cacti group cacti 0.8.6 • the cacti group cacti 0.8.6a • the cacti group cacti 0.8.6b • the cacti group cacti 0.8.6c • the cacti group cacti 0.8.6d • the cacti group cacti 0.8.6e

Related

Referenced by CWE · observed example (1)

  • CWE-637 Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism') weakness

References