CVE-2022-46169 PoC — Cacti 命令注入漏洞

Source

Associated Vulnerability

Description

Exploit to CVE-2022-46169 vulnerability

Readme

# CVE-2022-46169 Exploit
Exploit to CVE-2022-46169 vulnerability on Cacti 1.2.19


[Options]

```
-u --url victim's url

-f --forwarded X-Forwarded value to bypass the auth

-m --mode: check for Checking for Vulnerable Servers, or exploit for Fun exploitation mode :D
```
[Usage]

```
1. $> ./cve_2022_46169.py -u http://10.10.10.10/cacti -f 10.10.10.10 -m exploit
2. $> ./cve_2022_46169.py -u http://10.10.10.10/cacti -f 127.0.0.1 -m check
```
[References]

https://www.sonarsource.com/blog/cacti-unauthenticated-remote-code-execution/

![image](https://user-images.githubusercontent.com/109983457/212446392-27280172-2fb7-4416-936f-3340b26087e0.png)

File Snapshot

 [4.0K]  /data/pocs/2ad10712b5ae14e5be2a51cb426cb999ee5a57c5
├── [6.5K]  cve_2022_46169.py
└── [ 655]  README.md

0 directories, 2 files

Remarks