CVE-2005-1525

SQL injection vulnerability in config_settings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

Cacti

The Cacti Group Cacti

≤ 0.8.6d, 0.5, 0.6, 0.6.1, 0.6.2, 0.6.3, 0.6.4, 0.6.5, 0.6.6, 0.6.7, 0.6.8, 0.6.8a, 0.8, 0.8.1, 0.8.2, 0.8.2a, 0.8.3, 0.8.3a, 0.8.4, 0.8.5a

CVSS 2.0

7.5 HIGH

EPSS

1.9% (79th percentile)

NVD status

Modified

Published

2005-06-22