CVE-2014-4000

Cacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object…

published November 15, 2017

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

Cacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object, related to calling unserialize(stripslashes()).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01672 · 76.6th percentile
Published
2017-11-15T16:00Z
EPSS history
Timeline
  • 15 NOV 16:00Z
    Cacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object…
    cvelistv5