CVE-2020-35701

An issue was discovered in Cacti 1.2.x through 1.2.16

published January 11, 2021

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in data_debug.php allows remote authenticated attackers to execute arbitrary SQL commands via the site_id parameter. This can lead to remote code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04760 · 91.9th percentile
Published
2021-01-11T15:57Z
EPSS history
Timeline
  • 11 JAN 15:57Z
    An issue was discovered in Cacti 1.2.x through 1.2.16
    cvelistv5