CVE-2002-1477
CVE-2002-1477
This page contains facts from public vulnerability sources. Check the original advisory before updating.
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
EPSS 2.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.iss.net/security_center/static/10048.php
- http://www.debian.org/security/2002/dsa-164
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0028.html
- http://www.securityfocus.com/bid/5627
- http://www.knights-of-the-routing-table.org/advisories/krt_001_20020903_cacti.txt
- https://nvd.nist.gov/vuln/detail/CVE-2002-1477