Security Advisory

CVE-2014-5261

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-08-22 14:00:00
Last updated 2024-08-06 11:41:47
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related to the rrdtool commandline in lib/rrd.php.