Suse Package Hub
1 CVEs
product
Monthly
graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
PHP
Command Injection
Debian
Cacti
Debian Linux
+6
NVD
GitHub
Exploit-DB
CVSS 3.1
8.8
EPSS
73.8%
EPSS 74%
CVSS 8.8
HIGH
POC
THREAT
This Week
graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
PHP
Command Injection
Debian
+8
NVD
GitHub
Exploit-DB