CVE-2010-1431

SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the export_item_id parameter.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
VendorProductVersion
cacticacti
𝑥
≤ 0.8.7e
cacticacti
0.5
cacticacti
0.6
cacticacti
0.6.1
cacticacti
0.6.2
cacticacti
0.6.3
cacticacti
0.6.4
cacticacti
0.6.5
cacticacti
0.6.6
cacticacti
0.6.7
cacticacti
0.6.8
cacticacti
0.6.8a:a
cacticacti
0.8
cacticacti
0.8.1
cacticacti
0.8.2
cacticacti
0.8.2a:a
cacticacti
0.8.3
cacticacti
0.8.3a:a
cacticacti
0.8.4
cacticacti
0.8.5
cacticacti
0.8.5a:a
cacticacti
0.8.6
cacticacti
0.8.6a:a
cacticacti
0.8.6b:b
cacticacti
0.8.6c:c
cacticacti
0.8.6d:d
cacticacti
0.8.6f:f
cacticacti
0.8.6g:g
cacticacti
0.8.6h:h
cacticacti
0.8.6i:i
cacticacti
0.8.6j:j
cacticacti
0.8.6k:k
cacticacti
0.8.7
cacticacti
0.8.7a:a
cacticacti
0.8.7b:b
cacticacti
0.8.7c:c
cacticacti
0.8.7d:d
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
cacti
bullseye
1.2.16+ds1-2+deb11u3
fixed
bullseye (security)
1.2.16+ds1-2+deb11u4
fixed
bookworm
1.2.24+ds1-1+deb12u4
fixed
bookworm (security)
1.2.24+ds1-1+deb12u2
fixed
sid
1.2.28+ds1-2
fixed
trixie
1.2.28+ds1-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
cacti
oneiric
not-affected
natty
not-affected
maverick
not-affected
lucid
Fixed 0.8.7e-2ubuntu0.1
released
karmic
ignored
jaunty
ignored
hardy
ignored
dapper
ignored
References