CVE-2011-4824

Cacti < 0.8.7h - SQL Injection via login_username Parameter

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in auth_login.php in Cacti before 0.8.7h allows remote attackers to execute arbitrary SQL commands via the login_username parameter.

References (11)

Core 11
Core References
Various Sources x_refsource_confirm
http://www.cacti.net/release_notes_0_8_7h.php
Various Sources x_refsource_confirm
http://bugs.cacti.net/view.php?id=2062
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/46876
Various Sources x_refsource_confirm
http://forums.cacti.net/viewtopic.php?f=21&t=44116
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/50671
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069141.html
Various Sources x_refsource_confirm
http://svn.cacti.net/viewvc?view=rev&revision=6807
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069137.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44133
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/71326
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069126.html

Scores

EPSS 0.0254
EPSS Percentile 83.3%

Details

CWE
CWE-89
Status published
Products (38)
cacti/cacti 0.5
cacti/cacti 0.6
cacti/cacti 0.6.1
cacti/cacti 0.6.2
cacti/cacti 0.6.3
cacti/cacti 0.6.4
cacti/cacti 0.6.5
cacti/cacti 0.6.6
cacti/cacti 0.6.7
cacti/cacti 0.6.8
... and 28 more
Published Dec 15, 2011
Tracked Since Feb 18, 2026