CVE-2006-6799

SQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled, allows remote attackers to execute arbitrary SQL commands via the…

published December 28, 2006

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

SQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled, allows remote attackers to execute arbitrary SQL commands via the (1) second or (2) third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are later used in the polling_items array and popen function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02588 · 85.1th percentile
Published
2006-12-28T21:00Z
EPSS history
Timeline
  • 28 DEC 21:00Z
    SQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled, allows remote attackers to execute arbitrary SQL commands via the…
    cvelistv5