Cacti 1.2.24 Command Injection - KizzMyAnthia.com

# Exploit Title: Cacti 1.2.24 - Authenticated command injection when using SNMP options# Date: 2023-07-03# Exploit Author: Antonio Francesco Sardella# Vendor Homepage: https://www.cacti.net/# Software Link: https://www.cacti.net/info/downloads# Version: Cacti 1.2.24# Tested on: Cacti 1.2.24 installed on 'php:7.4.33-apache' Docker container# CVE: CVE-2023-39362# Category: WebApps# Original Security Advisory: https://github.com/Cacti/cacti/security/advisories/GHSA-g6ff-58cj-x3cp# Example Vulnerable Application: https://github.com/m3ssap0/cacti-rce-snmp-options-vulnerable-application# Vulnerability discovered and reported by:

Related Keywords

Antonio Francesco Sardella ,Software Link ,Community String ,Exploit Title ,Exploit Author ,Antonio Francesco ,Vendor Homepage ,Original Security Advisory ,Example Vulnerable Application ,