CVE-2024-46987

CVE-2024-46987 — Camaleon CMS 임의 경로 탐색 승인된 보안 평가, 침투 테스트, 교육 연구용으로만 사용하십시오. 개요...

CVE-2024-46987

このリポジトリには README がありません。...

msf-cve-2024-46987

MSF-CVE-2024-46987 CVE-2024-46987 を悪用する Metasploit モジュール - Camaleon CMS バージョン = 2.8.0 および 2.9.0 における認証済みパストラバーサル（パス横断）の脆弱性 Goultarde によるこの POC に基づいています。...

HackTheBox-Facts

HTB Facts — 完全な攻略記 難易度: 中級 OS: Linux タグ: Web, MinIO, Camaleon CMS, パストラバーサル, SSTI, 権限昇格 目次 1. 偵察 2. Web列挙 — ポート80 3. MinIOの発見 — ポート54321 4. Camaleon CMS — 管理者アクセス 5. 管理者ロールへの権限昇格 6. MinIO認証情報の発見 7. 任意ファイル読み取り — CVE-2024-46987 8. triviaとしてSSHアクセス 9. rootへの権限昇格 10. フラグ 偵察...

Metasploit Wrap-Up 04/25/2026

Check Method Visibility Metasploit has supported check methods for many years now. It’s not always desirable to jump straight into exploiting a vulnerability but instead to determine if the target is vulnerable. Metasploit tries to be very conservative with classifying a target as “vulnerable”...

Exploit for Path Traversal in Tuzitio Camaleon_Cms

CVE-2024-46987 - Camaleon CMS Local File Inclusion Authentica...

CVE-2024-46987

Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's downloadprivatefile method allows authenticated users to download any file on the web server Camaleon CMS is running on depending on the file...

CVE-2024-46987

Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's downloadprivatefile method allows authenticated users to download any file on the web server Camaleon CMS is running on depending on the file...

CVE-2024-46987 Arbitrary path traversal in Camaleon CMS

Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's downloadprivatefile method allows authenticated users to download any file on the web server Camaleon CMS is running on depending on the file...