Description
Cacti weathermap插件存在任意文件上传漏洞
Cacti weathermap插件任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/CactiEZ-weathermap-%E6%8F%92%E4%BB%B6%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%86%99%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://blog.csdn.net/m0_46689007/article/details/128106529
https://www.cnvd.org.cn/flaw/show/CNVD-2016-12935
http://wooyun.2xss.cc/bug_detail.php?wybug_id=wooyun-2016-0178883
https://cn-sec.com/archives/39297.html
https://masterxsec.github.io/2018/04/09/CactiEZ-weathermap%E6%8F%92%E4%BB%B6%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%86%99%E5%85%A5/
https://avd.aliyun.com/detail?id=AVD-2021-913819
https://qkl.seebug.org/vuldb/ssvid-91028
https://gist.github.com/gerry/d977490319a474b9d777538452018b54
https://s4e.io/tools/cacti-weathermap-arbitrary-file-write
https://www.exploit-db.com/exploits/26125