012Git012

Cacti provides an operational monitoring and fault management framework. There is a file inclusion issue in the `lib/plugin.php` file, specifically with the `api plugin hook()` function, which reads the `plugin hooks` and `plugin config` tables in the database. The read data is directly used to concatenate the file path, which is used for file inclusion. Combined with SQL injection vulnerabilities, remote code execution can be implemented.

The issue is related to a lack of protection in the SQL query structure of the Cacti network monitoring tool, specifically in the `pollers.php` script. This allows an authorized user to execute arbitrary SQL code, potentially leading to the execution of arbitrary code by a remote attacker. The vulnerable component is the `pollers.php` script. The impact of this issue is the execution of arbitrary SQL code.

The issue is related to incorrect handling of file names for PHP include or require functions in the link.php component, allowing an attacker to execute arbitrary code on the server. This can be achieved through SQL Injection and insufficient processing of the include file path. The exploitation of this issue is possible for an authorized user, and its impact is the execution of arbitrary code on the server.

The issue is related to the lack of protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting (XSS) attack and execute arbitrary code. The vulnerable component is the `graphs new.php` file. Exploitation of the vulnerability is possible for an authorized user, leading to the execution of arbitrary JavaScript code in the attacked user's browser.