CVE-2006-6799

Severity Score

7.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

SQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled, allows remote attackers to execute arbitrary SQL commands via the (1) second or (2) third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are later used in the polling_items array and popen function.

Vulnerabilidad de inyección SQL en Cacti 0.8.6i y anteriores, cuando register_argc_argv está activado, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los argumentos (1) segundo o (2) tercero de cmd.php. NOTA: este problema puede ser aprovechado para ejecutar comandos de su elección puesto que los resultados de la consulta SQL son utilizados posteriormente en el array polling_items y la función popen.

*Credits: N/A

CVSS Scores

NISTv2 7.5

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-12-28 CVE Reserved
2006-12-28 CVE Published
2024-04-02 EPSS Updated
2024-08-07 CVE Updated
2024-08-07 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (16)

URL	Tag	Source
http://secunia.com/advisories/23665	Third Party Advisory
http://secunia.com/advisories/23917	Third Party Advisory
http://secunia.com/advisories/23941	Third Party Advisory
http://securitytracker.com/id?1017451	Vdb Entry
http://www.cacti.net/release_notes_0_8_6j.php	X_refsource_confirm
http://www.securityfocus.com/archive/1/457290/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/21799	Vdb Entry
http://www.vupen.com/english/advisories/2006/5193	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/31177	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/3029	2024-08-07

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/23528	2018-10-17
http://security.gentoo.org/glsa/glsa-200701-23.xml	2018-10-17
http://www.debian.org/security/2007/dsa-1250	2018-10-17
http://www.mandriva.com/security/advisories?name=MDKSA-2007:015	2018-10-17
http://www.novell.com/linux/security/advisories/2007_07_cacti.html	2018-10-17
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.001.html	2018-10-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
The Cacti Group Search vendor "The Cacti Group"		Cacti Search vendor "The Cacti Group" for product "Cacti"				<= 0.8.6i Search vendor "The Cacti Group" for product "Cacti" and version " <= 0.8.6i"		-		Affected