CVE-2002-1477
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute...
CVE-2002-1477 is a high vulnerability (CVSS 7.5) in The Cacti Group Cacti, published September 10, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.28%, the 83rd percentile. Fixed in cacti 0.6.8a-2.
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
Exploit likelihood
What each source reports
NVD Score used
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
- Record
CVE-2002-1477- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
- Record
CVE-2002-1477- Updated
- 2026-11-02
EUVDEUVD-2002-1460 No score
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
- Record
EUVD-2002-1460- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-89r6-x49c-h6w2 No score
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute...
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
- Record
GHSA-89r6-x49c-h6w2- Updated
- 2026-11-02
OSV No score
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
- Record
CVE-2002-1477- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-1477 No score
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.
- Record
DEBIAN-CVE-2002-1477- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
iss.net/security_center/static/10048.php
debian.org/security/2002/dsa-164
archives.neohapsis.com/archives/bugtraq/2002-09/0028.html
securityfocus.com/bid/5627
knights-of-the-routing-table.org/advisories/krt_001_20020903_cacti.txt
nvd.nist.gov/vuln/detail/CVE-2002-1477
github.com/advisories/GHSA-89r6-x49c-h6w2
security-tracker.debian.org/tracker/CVE-2002-1477