vendor:
Cacti
by:
David Maciejak, hdm
7.5
CVSS
HIGH
Arbitrary command execution
78
CWE
Product Name: Cacti
Affected Version From: All versions prior to 0.8.6-d
Affected Version To: 0.8.6-d
Patch Exists: YES
Related CWE:
CPE: a:raxnet:cacti
Platforms Tested: Unix
2010
Cacti graph_view.php Remote Command Execution
This module exploits an arbitrary command execution vulnerability in the Raxnet Cacti 'graph_view.php' script. All versions of Raxnet Cacti prior to 0.8.6-d are vulnerable.
Mitigation:
Update to the latest version of Raxnet Cacti (0.8.6-d or higher)