CVE-2017-12065

Critical

Published: 01/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The spikekill.php file in Cacti before version 1.1.16 may allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter.

Risk Assessment

This vulnerability could lead to remote code execution, posing a serious threat to the integrity and confidentiality of the system.

Recommendation

It is recommended to update Cacti to version 1.1.16 or later to mitigate this vulnerability.

Original NVD description (English source)

spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter.