CVE Catalog
CVE-2014-5261
HighSummary
The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related to the rrdtool commandline in lib/rrd.php.
Risk Assessment
An attacker could exploit this vulnerability to execute remote code, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to upgrade Cacti to the latest version to mitigate this vulnerability and to review and restrict access to scripts that may be vulnerable.
Other vulnerabilities in Cacti 0.8.8b i wcześniejsze
Original NVD description (English source)
The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related to the rrdtool commandline in lib/rrd.php.