CVE-2005-2148

Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary commands or SQL by sending a legitimate value in a POST request or cookie, then specifying the attack string in the URL, which causes the get_request_var function to return the wrong value in the $_REQUEST variable, which is cleansed while the original malicious $_GET value remains unmodified, as demonstrated in (1) graph_image.php and (2) graph.php.

Affected Software

Name	Vendor	Start Version	End Version
Cacti	The_cacti_group	0.8 (including)	0.8 (including)
Cacti	The_cacti_group	0.8.1 (including)	0.8.1 (including)
Cacti	The_cacti_group	0.8.2 (including)	0.8.2 (including)
Cacti	The_cacti_group	0.8.2a (including)	0.8.2a (including)
Cacti	The_cacti_group	0.8.3 (including)	0.8.3 (including)
Cacti	The_cacti_group	0.8.3a (including)	0.8.3a (including)
Cacti	The_cacti_group	0.8.4 (including)	0.8.4 (including)
Cacti	The_cacti_group	0.8.5 (including)	0.8.5 (including)
Cacti	The_cacti_group	0.8.5a (including)	0.8.5a (including)
Cacti	The_cacti_group	0.8.6 (including)	0.8.6 (including)
Cacti	The_cacti_group	0.8.6a (including)	0.8.6a (including)
Cacti	The_cacti_group	0.8.6b (including)	0.8.6b (including)
Cacti	The_cacti_group	0.8.6c (including)	0.8.6c (including)
Cacti	The_cacti_group	0.8.6d (including)	0.8.6d (including)
Cacti	The_cacti_group	0.8.6e (including)	0.8.6e (including)
Cacti	Ubuntu	dapper	*
Cacti	Ubuntu	devel	*
Cacti	Ubuntu	edgy	*
Cacti	Ubuntu	feisty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2005-2148
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References