Description
graph.php in Ganglia PHP RRD Web Client 1.0.2 allows remote attackers to execute arbitrary commands via the command parameter, which is provided to the passthru function.
References
- ganglia-graph-command-execution(7999) vdb-entry
- 3962 vdb-entry
- 1003376 vdb-entry