VDB
CNVD-2020-13156
CNVD-2020-13156
PUBLISHED
Cacti是Cacti团队的一套开源的网络流量监测和分析工具。该工具通过snmpget来获取数据，使用RRDtool绘画图形进行分析，并提供数据和用户管理功能。 Cacti 1.2.8版本中的graph_realtime.php文件存在安全漏洞。远程攻击者可借助cookie中的shell元字符利用该漏洞执行任意操作系统命令。
Exploit Intelligence
- 0xm4ud/Cacti-CVE-2020-8813 (github-poc-repo)
- 0xm4ud/Cacti-CVE-2020-8813 (github-poc-repo)
- Cacti v1.2.8 Unauthenticated Remote Code Execution (github-poc-repo)
- Cacti v1.2.8 Unauthenticated Remote Code Execution (github-poc-repo)
- CVE-2020-8813 - RCE through graph_realtime.php in Cacti 1.2.8 (github-poc-repo)
- CVE-2020-8813 - RCE through graph_realtime.php in Cacti 1.2.8 (github-poc-repo)
- CVE-2020-8813 - RCE through graph_realtime.php in Cacti 1.2.8 (github-poc)
- CVE-2020-8813 - RCE through graph_realtime.php in Cacti 1.2.8 (github-poc)
- Cacti v1.2.8 Unauthenticated Remote Code Execution (github-poc)
- Cacti v1.2.8 Unauthenticated Remote Code Execution (github-poc)
…and 8 more exploits
Timeline
- Feb 22, 2020 CVE Published