| Package | Affected versions | Patched versions |
|---|---|---|
| cacti | = 1.2.8 |
data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input Methods -> Unix -> Ping Host. NOTE: the vendor has stated "This is a false alarm.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free