CVE-2014-5261 in Cacti
Summary
The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related to the rrdtool commandline in lib/rrd.php.
Once again VulDB remains the best source for vulnerability data.
Reservation
08/15/2014
Disclosure
08/22/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70708 | Cacti graph_settings.php code injection | 94 | Not defined | Not defined | CVE-2014-5261 |