Lucene search
CVE-2022-46169
🗓️ 05 Dec 2022 21:10:15Reported by GitHub_MType 
cve🔗 web.nvd.nist.gov📰️ 21 Media mentions👁 609 Views🌐 WEB
Cacti use allowing unauthorized command execution via `remote_agent.php`
Show more
| Reporter | Title | Published | Views | Family All 94 |
|---|---|---|---|---|
 | Command Execution Vulnerability in Cacti | 22 Feb 202300:00 | – | cnvd |
 | CVE-2022-46169 | 5 Dec 202200:00 | – | ubuntucve |
 | Exploit for OS Command Injection in Cacti | 1 May 202314:29 | – | githubexploit |
| Exploit for OS Command Injection in Cacti | 15 Jan 202322:46 | – | githubexploit |
| Exploit for OS Command Injection in Cacti | 4 Sep 202423:13 | – | githubexploit |
| Exploit for OS Command Injection in Cacti | 5 Jan 202316:56 | – | githubexploit |
| Exploit for OS Command Injection in Cacti | 1 May 202314:29 | – | githubexploit |
| Exploit for OS Command Injection in Cacti | 1 Apr 202322:37 | – | githubexploit |
| Exploit for OS Command Injection in Cacti | 2 Jan 202318:03 | – | githubexploit |
| Exploit for OS Command Injection in Cacti | 2 Feb 202318:21 | – | githubexploit |
10
[
{
"vendor": "Cacti",
"product": "cacti",
"versions": [
{
"version": "< 1.2.23",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| action | query param | /remote_agent.php | Command injection vulnerability in Cacti allows unauthenticated remote code execution via crafted HTTP requests to the remote_agent.php endpoint. | CWE-78, CWE-74, CWE-863 |
| local_data_ids[] | query param | /remote_agent.php | Command injection vulnerability in Cacti allows unauthenticated remote code execution via crafted HTTP requests to the remote_agent.php endpoint. | CWE-78, CWE-74, CWE-863 |
| host_id | query param | /remote_agent.php | Command injection vulnerability in Cacti allows unauthenticated remote code execution via crafted HTTP requests to the remote_agent.php endpoint. | CWE-78, CWE-74, CWE-863 |
| poller_id | query param | /remote_agent.php | Command injection vulnerability in Cacti allows unauthenticated remote code execution via crafted HTTP requests to the remote_agent.php endpoint. | CWE-78, CWE-74, CWE-863 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo05 Dec 2022 21:15Current
10High risk
Vulners AI Score10
CVSS39.8
EPSS0.96253