The flaw in managers.php stems from passing a user-supplied string to PHP’s unserialize() without sanitization, then directly appending the resulting array elements into an SQL DELETE statement. The lack of numeric validation on the array values allows an attacker to inject arbitrary SQL code into the DELETE query. Consequently, a malicious user could delete, alter, or otherwise manipulate SNMP manager records stored in the database, compromising data integrity and potentially exposing sensitive configuration information.

Cacti, the open management framework, is affected in all releases of version 1.2.30 and earlier. The vulnerability exists in the web interface’s SNMP agent management section, specifically the managers.php page that processes the "selected_graphs_array" parameter. Users running these older releases host the insecure code in their environments.

The vulnerability carries a CVSS score of 7.2, indicating a moderate to high impact. No EPSS data is published, and the issue is not listed in the CISA KEV catalog. Exploitation requires authenticated access to the web interface with permissions to manage SNMP agents; once authenticated, an attacker can trigger the injection by submitting a crafted request to managers.php. Because the flaw allows direct manipulation of the database, the risk to confidentiality and integrity is significant until the fix is installed.