CVE-2014-4644

This is a writeup describing a SQL injection vulnerability in the Cacti Superlinks plugin. It provides a URL for exploitation but lacks actual exploit code or payload details.

This exploit leverages SQL injection in Cacti's Superlinks Plugin 1.4-2 to achieve remote code execution via a second-order LFI. It poisons the application log with PHP code and then uses SQLi to include the log file, enabling command execution.