CVE-2005-10004
HIGHCacti < 0.8.6-d - Authenticated Remote Command Execution via graph_view.php graph_start Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-10004.
PoCs published by Metasploit, David Maciejak, including Metasploit module exploits/unix/webapp/cacti_graphimage_exec.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in Cacti's graph_view.php script by injecting arbitrary commands via the 'graph_start' parameter. It retrieves a valid image ID and triggers the vulnerability to execute the payload.
Description
Cacti versions prior to 0.8.6-d contain a remote command execution vulnerability in the graph_view.php script. An authenticated user can inject arbitrary shell commands via the graph_start GET parameter, which is improperly handled during graph rendering. This flaw allows attackers to execute commands on the underlying operating system with the privileges of the web server process, potentially compromising system integrity.
Exploits (3)
This Metasploit module exploits a command injection vulnerability in Cacti's graph_view.php script by injecting arbitrary commands via the 'graph_start' parameter. It retrieves a valid image ID and triggers the vulnerability to execute the payload.
This Metasploit module exploits a command injection vulnerability in Cacti's graph_view.php script by injecting a payload into the 'graph_start' parameter, allowing remote command execution. It first retrieves a valid image ID before triggering the vulnerability.
This Metasploit module exploits a command injection vulnerability in Cacti's graph_view.php script by injecting a payload into the 'graph_start' parameter. It first retrieves a valid image ID and then triggers the command execution bug.
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H