Monthly Archives: Mayıs 2024

CVE-2024-31459 | Cacti up to 1.2.26 lib/plugin.php api_plugin_hook filename control

A vulnerability was found in Cacti up to 1.2.26. It has been rated as problematic. Affected by this issue is the function api_plugin_hook in the library lib/plugin.php. The manipulation leads to improper control of filename for include/require statement in php program (‘php remote file inclusion’).

This vulnerability is handled as CVE-2024-31459. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.

CVE-2024-34340 | Cacti up to 1.2.26 MD5 Hash compat_password_hash comparison

A vulnerability was found in Cacti up to 1.2.26. It has been declared as problematic. Affected by this vulnerability is the function compat_password_hash of the component MD5 Hash Handler. The manipulation leads to incorrect comparison.

This vulnerabi…

CVE-2024-29894 | Cacti up to 1.2.26 lib/functions.php raise_message_javascript title cross site scripting

A vulnerability was found in Cacti up to 1.2.26. It has been rated as problematic. This issue affects the function raise_message_javascript in the library lib/functions.php. The manipulation of the argument title leads to cross site scripting.

The ide…