Local File Inclusion (RCE) in Cacti

Cacti, a monitoring tool, has a vulnerability where authorized users can include malicious files and run arbitrary code on the server. This happens because the application doesn't properly check file paths when including files.

CVE-2023-49084 exploits insufficient path validation in Cacti's link.php combined with SQL injection to achieve local file inclusion (LFI) leading to remote code execution. An authenticated attacker can manipulate include file parameters to load and execute arbitrary code on the server. The vulnerability requires valid credentials but allows full system compromise.