CVE-2005-1526
published 2005-06-22CVE-2005-1526: PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the…
PriorityP351high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
16.55%
96.6th percentile
PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[include_path] parameter.
Affected
25 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cacti | cacti | >= 0 < 0.8.6e-1 | 0.8.6e-1 |
| cacti | cacti | >= 0 < 0.8.6e-1 | 0.8.6e-1 |
| cacti | cacti | >= 0 < 0.8.6e-1 | 0.8.6e-1 |
| cacti | cacti | >= 0 < 0.8.6e-1 | 0.8.6e-1 |
| debian | cacti | < cacti 0.8.6e-1 (bookworm) | cacti 0.8.6e-1 (bookworm) |
| the_cacti_group | cacti | <= 0.8.6d | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
| the_cacti_group | cacti | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2005-1526: cacti - PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0...
vendor_debian·2005·CVSS 7.5
CVE-2005-1526 [HIGH] CVE-2005-1526: cacti - PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0...
PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[include_path] parameter.
Scope: local
bookworm: resolved (fixed in 0.8.6e-1)
bullseye: resolved (fixed in 0.8.6e-1)
forky: resolved (fixed in 0.8.6e-1)
sid: resolved (fixed in 0.8.6e-1)
trixie: resolved (fixed in 0.8.6e-1)
GHSA
GHSA-jm3f-754c-hx48: PHP remote file inclusion vulnerability in config_settings
ghsa_unreviewed·2022-05-01
CVE-2005-1526 [HIGH] GHSA-jm3f-754c-hx48: PHP remote file inclusion vulnerability in config_settings
PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[include_path] parameter.
OSV
CVE-2005-1526: PHP remote file inclusion vulnerability in config_settings
osv·2005-06-22·CVSS 7.5
CVE-2005-1526 [HIGH] CVE-2005-1526: PHP remote file inclusion vulnerability in config_settings
PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[include_path] parameter.
No detection rules found.
No writeups or analysis indexed.
http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978http://secunia.com/advisories/15490http://secunia.com/advisories/15931http://securitytracker.com/id?1014252http://www.cacti.net/release_notes_0_8_6e.phphttp://www.debian.org/security/2005/dsa-764http://www.gentoo.org/security/en/glsa/glsa-200506-20.xmlhttp://www.idefense.com/application/poi/display?id=266&type=vulnerabilitieshttp://www.osvdb.org/17425http://www.securityfocus.com/bid/14028https://exchange.xforce.ibmcloud.com/vulnerabilities/21119http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978http://secunia.com/advisories/15490http://secunia.com/advisories/15931http://securitytracker.com/id?1014252http://www.cacti.net/release_notes_0_8_6e.phphttp://www.debian.org/security/2005/dsa-764http://www.gentoo.org/security/en/glsa/glsa-200506-20.xmlhttp://www.idefense.com/application/poi/display?id=266&type=vulnerabilitieshttp://www.osvdb.org/17425http://www.securityfocus.com/bid/14028https://exchange.xforce.ibmcloud.com/vulnerabilities/21119
2005-06-22
Published