VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Jun 16, 2026

CVE-2004-1736

CVE-2004-1736

Description

Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the installation path in a PHP error message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Cacti (software)/Cacti2 versions
    cpe:2.3:a:the_cacti_group:cacti:0.8.5a:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:the_cacti_group:cacti:0.8.5a:*:*:*:*:*:*:*
    • (no CPE)range: = 0.8.5a

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.