PT-2023-8200 · Cacti +1 · Cacti +1

🗓️ 05 Sep 2023 00:00:00Reported by Positive TechnologiesType

Cacti before 1.2.25 allows remote code execution via data debug.php with specific user permissions.

Reporter	Title	Published	Views	Family All 1212
zdt	Cacti 1.2.8 - Remote Code Execution Exploit	24 Feb 202000:00	–	zdt
zdt	Cacti 1.2.8 - Authenticated Remote Code Execution Exploit	27 Feb 202000:00	–	zdt
zdt	Cacti 1.2.8 - Unauthenticated Remote Code Execution Exploit	27 Feb 202000:00	–	zdt
zdt	Cacti v1.2.8 - Unauthenticated Remote Code Execution Exploit	2 Mar 202000:00	–	zdt
zdt	Open-AudIT Professional 3.3.1 - Remote Code Execution Exploit	30 Apr 202000:00	–	zdt
zdt	Cacti 1.2.22 Command Injection Exploit	25 Jan 202300:00	–	zdt
zdt	Cacti v1.2.22 - Remote Command Execution Exploit	31 Mar 202300:00	–	zdt
zdt	Cacti 1.2.24 - Authenticated command injection when using SNMP options Vulnerability	9 Oct 202300:00	–	zdt
zdt	Cacti pollers.php SQL Injection / Remote Code Execution Exploit	5 Feb 202400:00	–	zdt
zdt	Cacti 1.2.26 Remote Code Execution Vulnerability	15 May 202400:00	–	zdt

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_package_import_rce.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cacti_unauthenticated_cmd_injection.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_pollers_sqli_rce.rb
github	www.github.com/Cacti/cacti/security/advisories/GHSA-hrg9-qqqx-wc4h
github	www.github.com/Cacti/cacti/blob/5f6f65c215d663a775950b2d9db35edbaf07d680/data_debug.php
github	www.github.com/Cacti/cacti/security/advisories/GHSA-q7g7-gcf6-wh4x
github	www.github.com/mhaskar/CVE-2020-8813
github	www.github.com/0xf4n9x/CVE-2022-46169
github	www.github.com/FredBrave/CVE-2022-46169-CACTI-1.2.22
github	www.github.com/sAsPeCt488/CVE-2022-46169

24 Jan 2025 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 27.7 - 9.3

CVSS 3.19.8

EPSS0.99826

SSVC