Lucene search
GoogleOSV:CVE-2020-28871HistoryFeb 10, 2021 - 1:15 a.m.
CVE-2020-28871
2021-02-1001:15:14
Google
osv.dev
10
Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an insecure file upload.
References
packetstormsecurity.com/files/163263/Monitorr-1.7.6m-Bypass-Information-Disclosure-Shell-Upload.html
packetstormsecurity.com/files/170974/Monitorr-1.7.6-Shell-Upload.html
packetstormsecurity.com/files/171429/Monitorr-1.7.6m-1.7.7d-Remote-Code-Execution.html
lyhinslab.org/index.php/2020/09/12/how-the-white-box-hacking-works-authorization-bypass-and-remote-code-execution-in-monitorr-1-7-6/
www.exploit-db.com/exploits/48980
Related
packetstorm
packetstorm
Monitorr 1.7.6m / 1.7.7d Remote Code Execution
2023-03-23 00:00:00
Monitorr 1.7.6 Shell Upload
2023-02-10 00:00:00
Monitorr 1.7.6m Bypass / Information Disclosure / Shell Upload
2021-06-23 00:00:00
checkpoint_advisories
checkpoint_advisories
Monitorr Remote Code Execution (CVE-2020-28871)
2021-02-23 00:00:00
prion
prion
Design/Logic Flaw
2021-02-10 01:15:00
nuclei
nuclei
Monitorr 1.7.6m - Unauthenticated Remote Code Execution
2021-07-19 23:20:18
cve
cve
CVE-2020-28871
2021-02-10 01:15:14
CVE-2024-0713
2024-01-19 14:15:13
attackerkb
attackerkb
CVE-2020-28871
2021-02-10 00:00:00
nvd
nvd
CVE-2020-28871
2021-02-10 01:15:14
CVE-2024-0713
2024-01-19 14:15:13
cvelist
cvelist
CVE-2020-28871
2021-02-10 00:00:00
metasploit
metasploit
Monitorr unauthenticated Remote Code Execution (RCE)
2023-03-13 13:32:14
zdt
zdt
Monitorr 1.7.6 Shell Upload Exploit
2023-02-15 00:00:00
Monitorr 1.7.6m / 1.7.7d Remote Code Execution Exploit
2023-03-23 00:00:00
Monitorr 1.7.6m Bypass / Information Disclosure / Shell Upload Exploit
2021-06-23 00:00:00
osv
osv
CVE-2024-0713
2024-01-19 14:15:13
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-03-24 18:33:38