CVE-2004-1737: Gentoo Linux

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters.

Affected products

• Gentoo Linux: version 1.4 only
• The Cacti Group Cacti: version 0.6 only; version 0.6.1 only; version 0.6.2 only; version 0.6.3 only; version 0.6.4 only; version 0.6.5 only; …

Published 2004-08-16. Last modified 2026-06-16.