CVE-2020-7058 | BDVDB-2026-129343 Detail

Description#

data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input Methods -> Unix -> Ping Host. NOTE: the vendor has stated "This is a false alarm.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/Cacti/cacti/issues/3186

Exploit#

No public exploit known

History#

Version 12020-01-15Record published in the CVE List.
Version 22024-11-18Most recent update recorded in the CVE List.