CVE-2002-1477

CVE-2002-1477 describes a command injection vulnerability in Cacti versions prior to 0.6.8, where authenticated administrators can execute arbitrary commands by injecting shell metacharacters into the graph title during edit mode. With a CVSS score of 7.5, this high-severity flaw allows for complete compromise of confidentiality, integrity, and availability due to its network-based attack vector and low attack complexity. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.