Design/Logic Flaw

2023-12-2217:15:00

PRIOn knowledge base

www.prio-n.com

cacti

operational monitoring

fault management

arbitrary sql code

pollers.php

vulnerability

patch

8.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.8%

JSON

Cacti provides an operational monitoring and fault management framework. In versions 1.2.25 and prior, it is possible to execute arbitrary SQL code through the pollers.php script. An authorized user may be able to execute arbitrary SQL code. The vulnerable component is the pollers.php. Impact of the vulnerability - arbitrary SQL code execution. As of time of publication, a patch does not appear to exist.