Davidkm-Ai

**Name of the Vulnerable Software and Affected Versions** Cacti versions prior to 1.2.31 **Description** Cacti is an open source performance and fault management framework. The software contains an unauthenticated Local File Inclusion (LFI), which occurs through the `graph theme` parameter and rrdtool IPC serialization hardening. LFI is a type of vulnerability that allows an attacker to read files on the server that they should not have access to. **Recommendations** Update to version 1.2.31.

**Name of the Vulnerable Software and Affected Versions** Cacti versions prior to 1.2.31 **Description** Cacti is an open source performance and fault management framework. The software contains a pre-authentication SQL Injection flaw in the 'graph view.php' endpoint. This issue occurs due to an unanchored `FILTER VALIDATE REGEXP`, which allows an attacker to execute arbitrary SQL commands without prior authentication. **Recommendations** Update to version 1.2.31.

**Name of the Vulnerable Software and Affected Versions** Cacti versions prior to 1.2.31 **Description** Cacti is an open source performance and fault management framework. The software contains a package import signature validation bypass that allows the use of self-signed packages. **Recommendations** Update to version 1.2.31.