CVE-2010-1431

Cacti <0.8.7e - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the export_item_id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Nahuel Grisolia · textwebappsphp
https://www.exploit-db.com/exploits/12338

References (15)

Core 15
Core References
Mailing List mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2010/Apr/272
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0986
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2010/dsa-2039
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1107
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/41041
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39568
Vendor Advisory vendor-advisory x_refsource_redhat
https://rhn.redhat.com/errata/RHSA-2010-0635.html
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2010:092
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/2132
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/39653
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39572
Exploit, Third Party Advisory x_refsource_misc
http://www.exploit-db.com/sploits/Bonsai-SQL_Injection_in_Cacti.pdf

Scores

EPSS 0.0614
EPSS Percentile 90.9%

Details

CWE
CWE-89
Status published
Products (37)
cacti/cacti 0.5
cacti/cacti 0.6
cacti/cacti 0.6.1
cacti/cacti 0.6.2
cacti/cacti 0.6.3
cacti/cacti 0.6.4
cacti/cacti 0.6.5
cacti/cacti 0.6.6
cacti/cacti 0.6.7
cacti/cacti 0.6.8
... and 27 more
Published May 04, 2010
Tracked Since Feb 18, 2026