CVE catalog

CVE-2006-0147

cacti affected and fixed versions

[CVE catalog]

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo.

Severity
High
Published
Source
[NVD] · [CVE record]
EPSS
13.06% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixiecacti0.8.6d-1FixedDistribution-reported fixed boundary[CVE-2006-0147]
Debiantrixiecacti1.2.30+ds1-1Fixed[CVE-2006-0147]
Debiantrixielibphp-adodb4.72-0.1FixedDistribution-reported fixed boundary[CVE-2006-0147]
Debiantrixielibphp-adodb5.22.9-0.1+deb13u1Fixed[CVE-2006-0147]
Debiansidcacti0.8.6d-1FixedDistribution-reported fixed boundary[CVE-2006-0147]
Debiansidcacti1.2.31+ds1-4Fixed[CVE-2006-0147]
Debiansidlibphp-adodb4.72-0.1FixedDistribution-reported fixed boundary[CVE-2006-0147]
Debiansidlibphp-adodb5.22.12-1Fixed[CVE-2006-0147]
Debianforkycacti0.8.6d-1FixedDistribution-reported fixed boundary[CVE-2006-0147]
Debianforkycacti1.2.31+ds1-4Fixed[CVE-2006-0147]
Debianforkylibphp-adodb4.72-0.1FixedDistribution-reported fixed boundary[CVE-2006-0147]
Debianforkylibphp-adodb5.22.12-1Fixed[CVE-2006-0147]

Showing 12 fix observations. All 17 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Debianbookwormcacti0.8.6d-1FixedDistribution-reported fixed boundary[CVE-2006-0147]
Debianbookwormcacti1.2.24+ds1-1+deb12u5Fixed[CVE-2006-0147]
Debianbookwormlibphp-adodb4.72-0.1FixedDistribution-reported fixed boundary[CVE-2006-0147]
Debianbookwormlibphp-adodb5.21.4-1+deb12u2Fixed[CVE-2006-0147]
Debianbookworm-securitycacti1.2.24+ds1-1+deb12u5Fixed[CVE-2006-0147]
Debianforkycacti0.8.6d-1FixedDistribution-reported fixed boundary[CVE-2006-0147]
Debianforkycacti1.2.31+ds1-4Fixed[CVE-2006-0147]
Debianforkylibphp-adodb4.72-0.1FixedDistribution-reported fixed boundary[CVE-2006-0147]
Debianforkylibphp-adodb5.22.12-1Fixed[CVE-2006-0147]
Debiansidcacti0.8.6d-1FixedDistribution-reported fixed boundary[CVE-2006-0147]
Debiansidcacti1.2.31+ds1-4Fixed[CVE-2006-0147]
Debiansidlibphp-adodb4.72-0.1FixedDistribution-reported fixed boundary[CVE-2006-0147]
Debiansidlibphp-adodb5.22.12-1Fixed[CVE-2006-0147]
Debiantrixiecacti0.8.6d-1FixedDistribution-reported fixed boundary[CVE-2006-0147]
Debiantrixiecacti1.2.30+ds1-1Fixed[CVE-2006-0147]
Debiantrixielibphp-adodb4.72-0.1FixedDistribution-reported fixed boundary[CVE-2006-0147]
Debiantrixielibphp-adodb5.22.9-0.1+deb13u1Fixed[CVE-2006-0147]
Original provider fields
{
  "package_releases": [
    {
      "name": "cacti",
      "status": "fixed",
      "release": "sid",
      "version": "1.2.31+ds1-4"
    },
    {
      "name": "cacti",
      "status": "fixed",
      "release": "forky",
      "version": "1.2.31+ds1-4"
    },
    {
      "name": "cacti",
      "status": "fixed",
      "release": "trixie",
      "version": "1.2.30+ds1-1"
    },
    {
      "name": "cacti",
      "status": "fixed",
      "release": "bookworm",
      "version": "1.2.24+ds1-1+deb12u5"
    },
    {
      "name": "cacti",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "1.2.24+ds1-1+deb12u5"
    },
    {
      "name": "libphp-adodb",
      "status": "fixed",
      "release": "sid",
      "version": "5.22.12-1"
    },
    {
      "name": "libphp-adodb",
      "status": "fixed",
      "release": "forky",
      "version": "5.22.12-1"
    },
    {
      "name": "libphp-adodb",
      "status": "fixed",
      "release": "trixie",
      "version": "5.22.9-0.1+deb13u1"
    },
    {
      "name": "libphp-adodb",
      "status": "fixed",
      "release": "bookworm",
      "version": "5.21.4-1+deb12u2"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "cacti",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "medium",
      "fixed_version": "0.8.6d-1"
    },
    {
      "bug": null,
      "name": "cacti",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "medium",
      "fixed_version": "0.8.6d-1"
    },
    {
      "bug": null,
      "name": "cacti",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "medium",
      "fixed_version": "0.8.6d-1"
    },
    {
      "bug": null,
      "name": "cacti",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "medium",
      "fixed_version": "0.8.6d-1"
    },
    {
      "bug": 349985,
      "name": "libphp-adodb",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "medium",
      "fixed_version": "4.72-0.1"
    },
    {
      "bug": 349985,
      "name": "libphp-adodb",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "medium",
      "fixed_version": "4.72-0.1"
    },
    {
      "bug": 349985,
      "name": "libphp-adodb",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "medium",
      "fixed_version": "4.72-0.1"
    },
    {
      "bug": 349985,
      "name": "libphp-adodb",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "medium",
      "fixed_version": "4.72-0.1"
    }
  ],
  "distribution_packages": []
}

[Debian bug #349985]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [cacti]Unknown
    Details (4)

    • 1.2.24+ds1-1+deb12u5 · all · bookworm

      Fixed · Fixed: 0.8.6d-1

      dsa · cacti · debian · bookworm; dsa · cacti · debian · 12

    • 1.2.24+ds1-1+deb12u5 · all · bookworm

      Fixed · Fixed: 0.8.6d-1

      dsa · cacti · debian · bookworm; dsa · cacti · debian · 12

    • 1.2.24+ds1-1+deb12u5 · all · bookworm-security

      Fixed · Fixed: 0.8.6d-1

      dsa · cacti · debian · bookworm; dsa · cacti · debian · 12

    • 1.2.24+ds1-1+deb12u5 · all · bookworm-security

      Fixed · Fixed: 0.8.6d-1

      dsa · cacti · debian · bookworm; dsa · cacti · debian · 12

  • [libphp-adodb]Unknown
    Details (4)

    • 5.21.4-1+deb12u2 · all · bookworm

      Fixed · Fixed: 4.72-0.1

      dsa · libphp-adodb · debian · bookworm; dsa · libphp-adodb · debian · 12

    • 5.21.4-1+deb12u2 · all · bookworm

      Fixed · Fixed: 4.72-0.1

      dsa · libphp-adodb · debian · bookworm; dsa · libphp-adodb · debian · 12

    • 5.22.9-0.1~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 4.72-0.1

      dsa · libphp-adodb · debian · bookworm; dsa · libphp-adodb · debian · 12

    • 5.22.9-0.1~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 4.72-0.1

      dsa · libphp-adodb · debian · bookworm; dsa · libphp-adodb · debian · 12

[Debian 13 (Trixie)]

  • [cacti]Unknown
    Details (2)

    • 1.2.30+ds1-1 · all · trixie

      Fixed · Fixed: 0.8.6d-1

      dsa · cacti · debian · 13

    • 1.2.30+ds1-1 · all · trixie

      Fixed · Fixed: 0.8.6d-1

      dsa · cacti · debian · 13

  • [libphp-adodb]Unknown
    Details (2)

    • 5.22.9-0.1+deb13u1 · all · trixie

      Fixed · Fixed: 4.72-0.1

      dsa · libphp-adodb · debian · 13

    • 5.22.9-0.1+deb13u1 · all · trixie

      Fixed · Fixed: 4.72-0.1

      dsa · libphp-adodb · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]