CVE-2020-14295

PoC ×3—

CVSS 3.1

7.2 high

EPSS

86%p100

Published

Jun 17, 2020 (Jun 17, 2020)

Modified

Jun 17, 2026

Description

A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.

Vendors: cacti fedoraproject
Products: cacti, fedora
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (86.3%)

In the news0 stories

No ingested article mentions this CVE yet.