CVE-2017-16660

PoC —

CVSS 3.0

7.2 high

EPSS

4%p90

Published

Nov 8, 2017 (Nov 8, 2017)

Modified

Jun 17, 2026

Description

Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remote_agent.php request containing PHP code in a Client-ip header.

Vendors: cacti
Products: cacti
Weakness: CWE-668
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.2%)

In the news0 stories

No ingested article mentions this CVE yet.