Unscored severity · published May 4, 2010
CVE-2010-1431
SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the export_item_id parameter
–
CVSS
3.8%
EPSS
No
On KEV
Description
SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the export_item_id parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.8% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Cacti · Cacti
through 0.8.7e; 0.5; 0.6; 0.6.1; 0.6.2; 0.6.3; +31 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1431
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1431
Patch
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=578909
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
seclists.org
http://seclists.org/fulldisclosure/2010/Apr/272
Vendor Advisory
http://secunia.com/advisories/39568
Vendor Advisory
http://secunia.com/advisories/39572
secunia.com
http://secunia.com/advisories/41041
More from Cacti
9.8
CVE-2022-46169
Unauthenticated Command Injection
10.0
CVE-2024-29895
Cacti command injection in cmd_realtime.php
9.8
CVE-2026-40079
Cacti: Command Injection via escape_command() no-op in RRDtool execution
9.8
CVE-2026-39948
Cacti has SQL Injection via rfilter parameter in RLIKE clauses
9.8
CVE-2026-39955
Cacti has Pre-Authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php