1. Forum
  2. FidoNet
  3. SECURITY

  • Cacti 1.2.22 Command Injection

    From Security Bot@2:250/1 to All on Mon Jun 5 16:22:00 2023


    Cacti 1.2.22 Command Injection

    This Metasploit module exploits an unauthenticated command injection vulnerability in Cacti versions through 1.2.22 in order to achieve unauthenticated remote code execution as the www-data user.

    https://packetstormsecurity.com/files/170714/cacti_unauthenticated_cmd_injectio n.rb.txt

    Tue, 24 Jan 2023 17:09:28 GMT
    ________________________________
    --- The information is for inforamtional purposes only.
    * Origin: Read us with http://winpoint.org JID: rs@captflint.com