Unrated severityNVD Advisory· Published Aug 16, 2004· Updated Apr 16, 2026
CVE-2004-1737
CVE-2004-1737
Description
SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters.
Affected products
20cpe:2.3:a:the_cacti_group:cacti:0.6:*:*:*:*:*:*:*+ 18 more
- cpe:2.3:a:the_cacti_group:cacti:0.6:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.6.6:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.6.7:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.6.8:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.6.8a:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.2a:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.3a:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:the_cacti_group:cacti:0.8.5a:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- www.gentoo.org/security/en/glsa/glsa-200408-21.xmlnvdPatchVendor Advisory
- secunia.com/advisories/12308nvdExploitPatchVendor Advisory
- www.securityfocus.com/bid/10960nvdExploitPatchVendor Advisory
- lists.grok.org.uk/pipermail/full-disclosure/2004-August/025376.htmlnvd
- marc.infonvd
- exchange.xforce.ibmcloud.com/vulnerabilities/17011nvd
News mentions
0No linked articles in our index yet.