Debian/cacti: unknown

SQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled, allows remote attackers to execute arbitrary SQL commands via the (1) second or (2) third arguments to cmd.

Action: Upgrade cacti to 0.8.6i-3 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-6799#Debian:13/cacti
• https://security-tracker.debian.org/tracker/CVE-2006-6799

published 2006-12-28T21:28:00Z · modified 2026-10-22T23:47:34.379232041Z · JSON