CVE-2005-1524
NoneCVSS
—
EPSS
15.9%
Published
Jun 22, 2005
CISA due date
—
The record
PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the config[library_path] parameter.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | cacti | 0 | 0.8.6e-1 |
| Debian:11 | cacti | 0 | 0.8.6e-1 |
| Debian:12 | cacti | 0 | 0.8.6e-1 |
| Debian:13 | cacti | 0 | 0.8.6e-1 |
| Debian:3.0 | cacti | 0 | 0.6.7-2.5 |
| Debian:3.1 | cacti | 0 | 0.8.6c-7sarge2 |
Related vulnerabilities
- CVE-2009-4112 Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by… Also affects cacti
- CVE-2006-0146 The server.php test script in ADOdb for PHP before 4.70, as used in multiple products… Also affects cacti
- CVE-2006-0147 Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP… Also affects cacti
- CVE-2005-1526 PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e… Also affects cacti
- CVE-2025-24367 Cacti is an open source performance and fault management framework. Also affects cacti
- CVE-2024-54146 Cacti is an open source performance and fault management framework. Also affects cacti
- CVE-2024-43365 Cacti is an open source performance and fault management framework. Also affects cacti
- CVE-2024-43364 Cacti is an open source performance and fault management framework. Also affects cacti