CVE-2018-16763

Fuel CMS 1.4.1 - Remote-Code-Ausführung FUEL CMS 1.4.1 ermöglicht die Auswertung von PHP-Code über den Filterparameter pages/select/ oder den Datenparameter preview/. Dies kann zu einer Pre-Auth-Remote-Code-Ausführung führen. Installation root@kitploit: git clone...

THM-Vulnerability_Capstone-CVE-2018-16763

THM-VulnerabilityCapstone-CVE-2018-16763 Una descrizione della room Vulnerability Capstone su THM e script di exploit per CVE-2018-16763. CREDITS Non rivendico il merito della scoperta di questa vulnerabilità. Grazie alle seguenti persone. Scoperta della vulnerabilità: 0xd0ff9 Room TryHackMe &...

CVE_2018_16763_Proof_of_Concept

CVE-2018-16763 Proof-of-Concept Un exploit Proof-of-Concept PoC per CVE-2018-16763 Fuel CMS - Preauthenticated Remote Code Execution. Descrizione Questo programma Python 3 funge da PoC per la vulnerabilità CVE-2018-16763 nel sistema di gestione dei contenuti Fuel CMS. In particolare, la...

CVE-2026-54718

Silverstripe Advanced Workflow (the symbiote/silverstripe-advancedworkflow module) is vulnerable to remote code execution prior to versions 6.4.5, 7.1.3, and 7.2.1. An attacker with permission to author the advanced workflow email template can inject a specially crafted server-side template paylo...

exploit_cms_fuel

Fuel CMS 1.4.1 - Exploit di Remote Code Execution RCE Questo repository contiene un'implementazione in Python 3 di un exploit per Fuel CMS versione 1.4.1. Lo script sfrutta CVE-2018-16763 , una vulnerabilità in cui una validazione insufficiente degli input nei parametri filter e preview consente ...

CVE-2018-16763

CVE-2018-16763 Analyzer CVE-2018-16763 Analyzer è un piccolo progetto Python per analizzare CVE-2018-16763 contro target FUEL CMS. Si concentra sul verificare se un target appare vulnerabile e sul mostrare l'output dei comandi in modo più pulito e leggibile quando la risposta dell'applicazione è...

CVE-2018-16763_FuelCMS-1.4.1_RCE

CVE-2018-16763 FuelCMS - 1.4.1 - RCE PoC FuelCMS 1.4.1 ermöglicht die Auswertung von PHP-Code über den Filterparameter pages/select/ oder den Datenparameter preview/. Dies kann zu einer Remote-Codeausführung ohne vorherige Authentifizierung führen. Exploit Dies funktioniert durch Ausnutzung des...

EUVD-2020-4145

Malware in sbrugna...

CVE-2020-11803

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the user-provided input is passed directly to the php eval function. The user has to be authenticated...

CVE-2020-11803

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the user-provided input is passed directly to the php eval function. The user has to be authenticated...

Input validation

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the user-provided input is passed directly to the php eval function. The user has to be authenticated...

CVE-2020-11803

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the user-provided input is passed directly to the php eval function. The user has to be authenticated...

CVE-2020-11803

CVE-2020-11803 affects SpamTitan 7.07. The issue arises from improper sanitization of the jaction parameter on mailqueue.php, where user input is passed directly to PHP eval(), enabling server-side code evaluation after authentication. Exploitation details are documented in multiple connected sou...

Remote code execution

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution...

CVE-2018-16763

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution...

CVE-2018-16763

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution...

CVE-2018-16763

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution...

CVE-2018-16763

Summary (CVE-2018-16763) : Fuel CMS version 1.4.1 is vulnerable to a pre-auth Remote Code Execution via PHP code evaluation. The flaw is triggered through unsafe handling of user-controlled data in the pages/select/ filter parameter or the preview/ data parameter, allowing arbitrary PHP execution...

CVE-2018-16763

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution. Recent assessments: noraj at May 08, 2021 7:33pm UTC reported: Unauthenticated RCE with default config, this is critical. Assessed...