CVE-2017-12065

spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter.

Date published : 2017-08-01

http://www.securityfocus.com/bid/100080

https://cacti.net/release_notes.php?version=1.1.16