Cacti Superlinks Plugin 1.4.2 /plugins/superlinks/superlinks.php SQL注入漏洞

No description provided by source...

Cacti Superlinks Plugin 1.4-2 - SQL Injection Local File Inclusion

Cacti Superlinks Plugin 1.4-2 - SQL Injection Local File Inclusion !/bin/sh Exploit Title: Cacti - Superlinks Plugin 1.4-2 RCELFI via SQL Injection Date: 19/12/2014 Exploit Author: Wireghoul Software Link: http://docs.cacti.net/plugin:superlinks Identifiers: CVE-2014-4644, EDB-ID-33809 Exploit...

PT-2014-6041

Name of the Vulnerable Software and Affected Versions Cacti superlinks plugin versions 1.4 through 2 Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the superlinks.php file. This can be exploited by sending malicious input to the vulnerable...