Lucene search
+L

Exploit for Code Injection in Getgrav Grav

🗓️ 24 Mar 2024 13:14:52Reported by akabe1Type 
githubexploit
 githubexploit
🔗 github.com👁 819 Views

Proof of Concept script to exploit authenticated SSTI+RCE in Grav CMS, creating a malicious RCE page on the vulnerable server running Grav CMS

Related
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Code Injection in Getgrav Grav
5 Oct 202412:05
–githubexploit
githubexploit
GithubExploit
Exploit for Code Injection in Getgrav Grav
5 Oct 202412:05
–githubexploit
bdu_fstec
BDU FSTEC
Grav CMS Code Execution
2 Apr 202400:00
–bdu_fstec
circl
Circl
CVE-2024-28116
24 Mar 202413:18
–circl
cnnvd
CNNVD
Grav 安全漏洞
21 Mar 202400:00
–cnnvd
cve
CVE
CVE-2024-28116
21 Mar 202421:44
–cve
cvelist
Cvelist
CVE-2024-28116 Server-Side Template Injection (SSTI) with Grav CMS security sandbox bypass
21 Mar 202421:44
–cvelist
github
Github Security Blog
Server-Side Template Injection (SSTI) with Grav CMS security sandbox bypass
22 Mar 202416:30
–github
kitploit
Kitploit
Graver
19 Oct 202600:21
–kitploit
kitploit
Kitploit
grav-cve-2024-28116
15 Oct 202616:25
–kitploit
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Aug 2025 11:19Current
8.6High risk
Vulners AI Score8.6
CVSS 3.18.8
EPSS0.05807
SSVC
819