Description
Cacti 存在 Reports Creation 匿名账户远程命令执行漏洞，影响版本为：version <= 1.2.24，利用条件为启用匿名访问、且匿名账户具备 ReportsCreation 权限
Cacti Reports Creation 匿名账户远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.redteam.wang/static/downloads/2023hvvday%20POC%E9%9B%86%E5%90%88.pdf
https://www.cnblogs.com/dxmao/articles/17674294.html
https://github.com/Threekiii/Awesome-POC
https://avd.aliyun.com/detail?id=AVD-2022-46169
https://www.secrss.com/articles/49767
https://www.sonarsource.com/blog/cacti-unauthenticated-remote-code-execution