CVE-2026-116009

Camaleon CMS versions prior to 2.9.3 are susceptible to a path traversal vulnerability in the crop_url media action. Users with minimal media permissions can exploit this by supplying ../ sequences in the name parameter to write arbitrary files. Specifically, an attacker can transmit a base64 dat...

EUVD-2026-109267

Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to write arbitrary files by supplying ../ sequences in the name parameter. Attackers can send a base64 data: URI to the cropurl media action to write an ERB template into a theme's...

HackTheBox-Facts

HTB Facts — Full Writeup OS: Linux Tags: Web, MinIO, Camaleon CMS, Path Traversal, Privilege Escalation Table of Contents 1. Reconnaissance 2. Web Enumeration — Port 80 3. MinIO Discovery — Port 54321 4. Camaleon CMS — Admin Access 5. Privilege Escalation to Admin Role 6. MinIO Credentials...

CVE-2024-46987

CVE-2024-46987 - Camaleon CMS Authenticated Arbitrary File Read This repository contains a Proof of Concept PoC script for CVE-2024-46987 , which allows for arbitrary file reading LFI / Path Traversal on Camaleon CMS. Description A Path Traversal vulnerability has been identified in Camaleon CMS...

Camaleon CMS < 2.8.1 Arbitrary File Write to RCE

An arbitrary file write vulnerability accessible via the upload method of the MediaController allows authenticated users to write arbitrary files to any location on the web server Camaleon CMS is running on depending on the permissions of the underlying filesystem. E.g. This can lead to a remote...

CVE-2025-2304

CVE-2025-2304 - Camaleon CMS Privilege Escalation This repository contains a Python script that automates the exploitation of the CVE-2025-2304 privilege escalation vulnerability in Camaleon CMS. It has been tested on version 2.9.0. Usage python exp.py http://target.exmaple user password123 Links...

CVE-2025-2304-POC

CVE-2025-2304 Privilege Escalation in Camaleon CMS Example python3 exploit.py http://target.com attacker attacker After successful exploitation, logout and login again to gain admin privileges. References https://nvd.nist.gov/vuln/detail/CVE-2025-2304...

CVE-2025-2304

Camaleon CMS 2.9.0 – Authenticated Privilege Escalation Role Change + Optional S3 Config Leak Target: Camaleon CMS v2.9.0 Type: Authenticated privilege escalation via mass-assignment in updatedajax role field Extras: Optional extraction of S3 configuration from the admin settings page if the...

CVE-2023-30145

Description: Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the formats parameter. Affected Component: All versions that are below 2.7.0 Fixed version: Fixed Versions: 2.7.4 Step to reproduce : Detection: 1.open below...

CVE-2025-2304-POC

CVE-2025-2304 PoC - Camaleon CMS Privilege Escalation A Proof of Concept PoC exploit for CVE-2025-2304 , a critical mass assignment vulnerability in Camaleon CMS that allows privilege escalation from low-privileged users to administrators. ██████╗ ██████╗ ██╗ ██╗███╗ ██╗ ██████╗ ███╗ ███╗██╗...

CVE-2024-48652

CVE-2024-48652 Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field Steps to Reproduce: 1.Open the URL: http://127.0.0.1/admin/dashboard 2.Log in using admin credentials. 3.Navigate to the "Settings" section...

CVE-2024-46987

CVE-2024-46987 – Camaleon CMS Authenticated Path Traversal / Arbitrary File Read CVE-2024-46987 is an authenticated path traversal vulnerability CWE-22 in Camaleon CMS a Ruby on Rails-based content management system. It allows a logged-in user even with low privileges to read arbitrary files on t...

CVE-2025-2304-exploit

CVE-2025-2304 - Camaleon CMS Mass Assignment Privilege Escalation 📌 Project Description CVE-2025-2304 is a Mass Assignment vulnerability in Camaleon CMS versions 2.9.1 that allows an authenticated user to elevate their privileges to administrator by manipulating the role parameter in password...

CVE-2025-2304-POC

CVE-2025-2304-POC Manual poc for CVE-2025-2304: Camaleon CMS Version 2.9.0 Exploitation Steps 1. Log in as a low-privileged user e.g., "Bob". 2. Intercept the password change using a proxy e.g Burpsuite, caido and more 3. Capture the updatedajax request during a password change. 4. Inject the...

HTB-Facts-Writeup

HackTheBox — Facts Machine Writeup Machine Info Field| Details ---|--- Name| Facts OS| Linux Difficulty| Easy Release| Season 10 Retired| No Attack Chain Overview Recon → Web Enumeration → CVE-2025-2304 Mass Assignment → S3/MinIO Credential Leak → SSH Key Extraction → Passphrase Cracking → User...

htb-facts

HTB — Facts Easy/Linux - Season 10 Summary Facts is an Easy Linux machine that requires exploiting a known vulnerability CVE-2025-2304 in Camaleon CMS to extract local AWS S3 credentials. Enumerating the internal S3 buckets reveals an SSH private key that must be cracked using John the Ripper to...

msf-cve-2024-46987

MSF-CVE-2024-46987 Metasploit module to exploit CVE-2024-46987 - an authenticated path traversal vulnerability in Camaleon CMS versions = 2.8.0 and 2.9.0 Based on this POC by Goultarde...

CVE-2026-66748-Camaleon-CMS---Authenticated-RCE-via-select_eval-Custom-Field

Security Advisory: Camaleon CMS - Authenticated RCE via selecteval Custom Field Assigned CVE ID: CVE-2026-66748 Product: Camaleon CMS https://github.com/owen2345/camaleon-cms Affected versions: 2.1.1 – 2.9.1 introduced commit 415cbda6 2015-10-16; fixed commit 15882366 2026-03-29 / v2.9.2 Severity...

CVE-2025-2304

CVE-2025-2304 - Camaleon CMS 2.9.0 - Privilege Escalation Exploit Overview This Python script exploits a critical mass assignment vulnerability in Camaleon CMS version 2.9.0, allowing any registered user to escalate their privileges to administrator. Vulnerability Details CVE : CVE-2025-2304 - Ma...

CVE-2025-2304

Camaleon CMS v2.9.1 - Mass Assignment leads to Privilege Escalation Exploit Tool - PoC Description This project is a Python-based exploitation proof of concept tool that demonstrates and analyzes a privilege escalation vulnerability affecting v2.9.1 of Camaleon CMS. The script automates the proce...