graph.php in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allows remote attackers to obtain the full path via an invalid local_graph_id parameter and other unspecified vectors.
Max CVSS
5.0
EPSS Score
0.71%
Published
2008-02-14
Updated
2018-10-15
1 vulnerabilities found