CVE-2014-5261

The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a…

published August 22, 2014

CVSS
—
EPSS
11%
Percentile
95.8
In the wild
Unconfirmed
What it is

The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related to the rrdtool commandline in lib/rrd.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10773 · 95.8th percentile
Published
2014-08-22T14:00Z
EPSS history
Timeline
  • 22 AUG 14:00Z
    The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a…
    cvelistv5