Suse Package Hub
1 CVEs
product
Monthly
graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Command Injection
PHP
Cacti
Fedora
Open Audit
+2
NVD
GitHub
Exploit-DB
CVSS 3.1
8.8
EPSS
73.8%
EPSS 74%
CVSS 8.8
HIGH
POC
THREAT
This Week
graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Command Injection
PHP
Cacti
+4
NVD
GitHub
Exploit-DB