Sploitus

Exploit for CVE-2022-46169

kitploit · 2026-08-25

Exploit Code

MARKDOWN24 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-0XF4N9X-CVE-2022-46169
# CVE-2022-46169

CVE-2022-46169 Cacti remote_agent.php 未授权命令注入漏洞。

## 认证绕过

添加 `X-Forwarded-For` 请求头即可绕过认证，注意其值并非固定值。

![image](https://assets.kitploit.com/production/public/readmes/14422/506b1640fae53fdbb3e82130154771cc1bd3bb49d8f01906100bb048225b3ccd.png)

![image](https://assets.kitploit.com/production/public/readmes/14422/dae060b1f7e085b609ef4183b02fb54f1bbd9d5c3ea7dcd4156c5054d443c334.png)

## 暴力枚举

使用 Burp Intruder 对 `host_id` 和 `local_data_ids` 的值进行模糊测试。

![image](https://assets.kitploit.com/production/public/readmes/14422/1ea114394e4fb3cc9923a1cdd3c8a8538f6bab755a8c3c0ebbaf023e3b016fa7.png)

![image](https://assets.kitploit.com/production/public/readmes/14422/acab165d3998d69b88ed277eb5687ca2ef4c0ce147c0619aadaa0e6c39d49337.png)

## 远程命令执行

命令注入点位于 `poller_id` 参数。