CVE-2006-6799: SQL Injection
SQL injection vulnerability in Cacti 0.8.6i and earlier, when registerargcargv is enabled, allows remote attackers to execute arbitrary SQL commands via the (1) second or (2) third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are later used in the pollingitems array and popen function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6799?
The severity of CVE-2006-6799 is considered high due to its ability to allow remote SQL command execution.
How do I fix CVE-2006-6799?
To fix CVE-2006-6799, upgrade to a version of Cacti later than 0.8.6i or disable register_argc_argv in the PHP configuration.
What impact can CVE-2006-6799 have on my system?
CVE-2006-6799 can allow attackers to execute arbitrary SQL commands, potentially leading to data breaches or system compromise.
Which versions of Cacti are affected by CVE-2006-6799?
CVE-2006-6799 affects Cacti versions up to and including 0.8.6i.
Can CVE-2006-6799 be exploited remotely?
Yes, CVE-2006-6799 can be exploited remotely if the affected version of Cacti is exposed to the internet.