CVE-2023-49085
HIGHCacti < 1.2.25 - Authenticated SQL Injection via pollers.php
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-49085.
PoCs published by Aleksey Solovev, Christophe De La Fuente, including Metasploit module exploits/multi/http/cacti_pollers_sqli_rce.
AI-analyzed exploit summary This Metasploit module exploits CVE-2023-49084 and CVE-2023-49085 in Cacti versions prior to 1.2.26, combining SQL injection and local file inclusion to achieve remote code execution. It requires authentication and specific user permissions to access the vulnerable `pollers.php` script.
Description
Cacti provides an operational monitoring and fault management framework. In versions 1.2.25 and prior, it is possible to execute arbitrary SQL code through the `pollers.php` script. An authorized user may be able to execute arbitrary SQL code. The vulnerable component is the `pollers.php`. Impact of the vulnerability - arbitrary SQL code execution. As of time of publication, a patch does not appear to exist.
Exploits (1)
This Metasploit module exploits CVE-2023-49084 and CVE-2023-49085 in Cacti versions prior to 1.2.26, combining SQL injection and local file inclusion to achieve remote code execution. It requires authentication and specific user permissions to access the vulnerable `pollers.php` script.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H