Exploit for Code Injection in Xwiki

🗓️ 22 Jun 2024 21:20:33Reported by bigb0xType

POC for CVE-2024-31982: XWiki Platform Remote Code Execution > 14.10.20. PoC and Bulk Scanner for exploit

Reporter	Title	Published	Views	Family All 18
GithubExploit	Exploit for Code Injection in Xwiki	22 Jun 202408:47	–	githubexploit
GithubExploit	Exploit for Code Injection in Xwiki	22 Jun 202417:04	–	githubexploit
Information Security Automation	New episode “In The Trend of VM” (#9): 4 trending vulnerabilities of October, scandal at The Linux Foundation, social “attack on the complainer”, “Ford’s method” for motivating IT specialists to fix vulnerabilities	28 Nov 202412:57	–	avleonov
Information Security Automation	About Remote Code Execution – XWiki Platform (CVE-2024-31982) vulnerability	31 Oct 202411:50	–	avleonov
BDU FSTEC	The vulnerability of the DatabaseSearch function in the XWiki platform, a tool for creating collaborative web applications. This vulnerability allows attackers to execute arbitrary code.	1 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-31982	22 Jun 202421:25	–	circl
CNNVD	XWiki Platform 安全漏洞	10 Apr 202400:00	–	cnnvd
CVE	CVE-2024-31982	10 Apr 202419:38	–	cve
Cvelist	CVE-2024-31982 XWiki Platform: Remote code execution as guest via DatabaseSearch	10 Apr 202419:38	–	cvelist
Github Security Blog	XWiki Platform: Remote code execution as guest via DatabaseSearch	10 Apr 202417:12	–	github