CVE-2005-1524

This exploit targets a command injection vulnerability in Cacti's 'graph_image.php' script, allowing remote command execution via unsanitized input in the 'graph_start' parameter. It downloads and executes a reverse shell script from a remote server.

This exploit demonstrates a remote file inclusion vulnerability in RaXnet Cacti by manipulating the 'config[library_path]' parameter in 'top_graph_header.php'. An attacker can execute arbitrary server-side script code by specifying a remote script location.