CVE-2022-46169-Cacti-1.2.22

CVE-2022-46169 이 익스플로잇은 @FredBrave의 원본 스크립트에서 수정된 버전이며, @arthurcortesr와 @alv-david에 의해 각색되었습니다. 사용법/예제 python3 CVE-2022-46169.py -u http://XX.XX.XX.XX --LHOST XX.XX.XX.XX --LPORT XXXX --host-id X --local-id X 예상 결과 Testing hostid=X, localdataid=XX... + Found working combination: hostid=X,...

CVE-2022-46169

CVE-2022-46169 POC これは、Cacti バージョン 1.2.22 に影響を与える CVE-2022-46169 脆弱性の概念実証 POC スクリプトです。 説明 CVE-2022-46169 脆弱性は、Cacti バージョン 1.2.22 までのバージョンにおいて、認証されていないコマンドインジェクションを許容し、www-data ユーザーとして認証されていないリモートコード実行を達成するものです。この脆弱性は、"remoteagent.php" ファイルの "hostid" パラメータにおけるユーザー入力の不適切な検証に起因します。 使用方法 python...

EUVD-2018-13544

Malware in sbrugna...

EUVD-2018-3614

Malware in sbrugna...

EUVD-2008-2084

Malware in sbrugna...

EUVD-2018-13545

Malware in sbrugna...

SQL Injection

centreon/centreon is vulnerable to SQL injection. An attacker is able to inject and execute arbitrary SQL commands via the hostid parameter...

SQL Injection

Centreon Web is vulnerable to SQL injection. The hostid parameter in makeXMLListServices.php is directly appended to the SQL query, allowing an attacker to inject and execute arbitrary SQL script through the affected parameter...

Sql injection

imggantt.php in Centreon Web before 2.8.27 allows attackers to perform SQL injections via the hostid parameter...

Sql injection

makeXMLListServices.php in Centreon Web before 2.8.28 allows attackers to perform SQL injections via the hostid parameter...

CVE-2018-21021

imggantt.php in Centreon Web before 2.8.27 allows attackers to perform SQL injections via the hostid parameter...

CVE-2018-11589

Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU parameter in viewLogs.php, the id parameter in GetXmlHost.php, the chartId parameter in ExportCSVServiceData.php, the searchCurve parameter in listComponentTemplates.php, or the...

Sql injection

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...

CVE-2010-1301

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...

CVE-2010-1301

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...

CVE-2008-2087

SQL injection vulnerability in searchresult.php in Softbiz Web Host Directory Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hostid parameter, a different vector than CVE-2005-3817...