| Package | Affected versions | Patched versions |
|---|---|---|
| cacti | = 0.8.6e= 0.8.7= 0.8.7a= 0.8.7b= 0.8.7c= 0.8.7d= 0.8.7e= 0.8.7f= 0.8.7g= 0.8.7i= 0.8.8= 0.8.8a≤ 0.8.8b |
The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a font size, related to the rrdtool commandline in lib/rrd.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free