← back
CVE-2005-1526

CVE-2005-1526

EPSS 16.6%
PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[include_path] parameter.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/25857unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978http://secunia.com/advisories/15490http://secunia.com/advisories/15931http://securitytracker.com/id?1014252https://exchange.xforce.ibmcloud.com/vulnerabilities/21119http://www.cacti.net/release_notes_0_8_6e.phphttp://www.debian.org/security/2005/dsa-764http://www.gentoo.org/security/en/glsa/glsa-200506-20.xmlhttp://www.idefense.com/application/poi/display?id=266&type=vulnerabilitieshttp://www.osvdb.org/17425http://www.securityfocus.com/bid/14028