Cacti pollers.php SQL Injection / Remote Code Execution

This Metasploit exploit module leverages sql injection and local file inclusion vulnerabilities in Cacti versions prior to 1.2.26 to achieve remote code execution. Authentication is needed and the account must have access to the vulnerable PHP script (pollers.php). This is granted by setting the Sites/Devices/Data permission in the General Administration section.

access account administration authentication cacti code code execution data devices exploit file general inclusion injection local metasploit permission php remote code remote code execution script sql sql injection vulnerabilities vulnerable