CVE-2005-1524
Cacti < 0.8.6d - Remote Code Execution via top_graph_header.php config[library_path] Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-1524. PoCs published by Alberto Trivero, Maciej Piotr Falkiewicz.
AI-analyzed exploit summary This exploit targets a command injection vulnerability in Cacti's 'graph_image.php' script, allowing remote command execution via unsanitized input in the 'graph_start' parameter. It downloads and executes a reverse shell script from a remote server.
Description
PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the config[library_path] parameter.
Exploits (2)
This exploit targets a command injection vulnerability in Cacti's 'graph_image.php' script, allowing remote command execution via unsanitized input in the 'graph_start' parameter. It downloads and executes a reverse shell script from a remote server.
This exploit demonstrates a remote file inclusion vulnerability in RaXnet Cacti by manipulating the 'config[library_path]' parameter in 'top_graph_header.php'. An attacker can execute arbitrary server-side script code by specifying a remote script location.