The vulnerability of the `host_new_graphs_save()` function in the Cacti network monitoring software (graphs_new.php) allows a attacker to execute arbitrary code.

The vulnerability of the hostnewgraphssave function in the Cacti network monitoring software’s script graphsnew.php involves the restoration of unreliable data in memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code using specially...

PT-2023-4942

Name of the Vulnerable Software and Affected Versions Cacti versions 1.2.24 Description The issue is related to insecure deserialization in Cacti, specifically within the host new graphs save function in graphs new.php. This is due to the use of the unserialize function without sanitizing user...

PT-2015-7780

Name of the Vulnerable Software and Affected Versions Cacti versions 0.8.8f and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved by sending crafted serialized data in the selected graphs array parameter in a save action, exploitin...