CVE-2005-10004highCWE-78

CVE-2005-10004: high-severity vulnerability in Raxnet/Ian Berry Cacti

Cacti graph_view.php RCE via graph_start Parameter Injection

Published · Updated

Follow this CVE+ Monitor Cacti+ Monitor cacti

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

36Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 8.7epss 2.8%
from disclosure to weaponsame day
Published on NVDAug 30
metasploitJan 15
Cacti versions prior to 0.8.6-d contain a remote command execution vulnerability in the graph_view.php script. An authenticated user can inject arbitrary shell commands via the graph_start GET parameter, which is improperly handled during graph rendering. This flaw allows attackers to execute commands on the underlying operating system with the privileges of the web server process, potentially compromising system integrity.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Raxnet/Ian Berry · Cacti