← Database

CVE-2004-1736

MEDIUM CVSS: 5.0 Published: 2004-12-31 Modified: 2026-06-16

Description

Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the installation path in a PHP error message.

Affected Platforms

The Cacti Group Cacti

Weakness Type

NVD-CWE-Other

References