CVE-2005-1526

Description

PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[include_path] parameter.

How to fix CVE-2005-1526

To remediate CVE-2005-1526, upgrade the affected package to a fixed version below.

• Debian/cacti—upgrade to 0.8.6e-1 or later

Is CVE-2005-1526 being exploited?

Moderate — EPSS is 8.7%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (1)

• from 0, < 0.8.6e-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2005-1526