exploit/unix/http/cacti_filter_sqli_rce

weaponized

Cacti color filter authenticated SQLi to RCE

view exploit source metasploittype exploitpublished 2020-06-17catalog metasploit
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-14295UShigh7.2Exploit
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts sta…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan