CVE-2022-46169-Cacti-1.2.22

CVE-2022-46169 Este exploit es una versión modificada del script original de @FredBrave y adaptada por @arthurcortesr y @alv-david. Uso/Ejemplos python3 CVE-2022-46169.py -u http://XX.XX.XX.XX --LHOST XX.XX.XX.XX --LPORT XXXX --host-id X --local-id X Resultados esperados Testing hostid=X,...

CVE-2022-46169

CVE-2022-46169 POC Este es un script de Prueba de Concepto POC para la vulnerabilidad CVE-2022-46169 que afecta a Cacti versión 1.2.22. Descripción La vulnerabilidad CVE-2022-46169 permite una inyección de comandos sin autenticación en versiones de Cacti hasta la 1.2.22, logrando así una ejecució...

EUVD-2018-13544

Malware in sbrugna...

EUVD-2018-3614

Malware in sbrugna...

EUVD-2008-2084

Malware in sbrugna...

EUVD-2018-13545

Malware in sbrugna...

SQL Injection

centreon/centreon is vulnerable to SQL injection. An attacker is able to inject and execute arbitrary SQL commands via the hostid parameter...

SQL Injection

Centreon Web is vulnerable to SQL injection. The hostid parameter in makeXMLListServices.php is directly appended to the SQL query, allowing an attacker to inject and execute arbitrary SQL script through the affected parameter...

Sql injection

imggantt.php in Centreon Web before 2.8.27 allows attackers to perform SQL injections via the hostid parameter...

Sql injection

makeXMLListServices.php in Centreon Web before 2.8.28 allows attackers to perform SQL injections via the hostid parameter...

CVE-2018-21021

imggantt.php in Centreon Web before 2.8.27 allows attackers to perform SQL injections via the hostid parameter...

CVE-2018-11589

Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU parameter in viewLogs.php, the id parameter in GetXmlHost.php, the chartId parameter in ExportCSVServiceData.php, the searchCurve parameter in listComponentTemplates.php, or the...

Sql injection

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...

CVE-2010-1301

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...

CVE-2010-1301

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the hostid parameter...

CVE-2008-2087

SQL injection vulnerability in searchresult.php in Softbiz Web Host Directory Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hostid parameter, a different vector than CVE-2005-3817...