CVE-2005-1524: The Cacti Group Cacti

Medium severity, CVSS 5.0. EPSS: 15.9% chance of exploitation in the next 30 days.

PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the config[library_path] parameter.

Affected products

• The Cacti Group Cacti: up to and including 0.8.6d; version 0.5 only; version 0.6 only; version 0.6.1 only; version 0.6.2 only; version 0.6.3 only; …

Published 2005-06-22. Last modified 2026-06-16.