Lucene search
+L

16 matches found

Kitploit
Kitploit
added 2026/09/04 8:01 a.m.6 views

CVE-2019-11447-EXP

CVE-2019-11447-EXP CuteNews Avatar 2.1.2 Remote Code Execution Vulnerability Before run the python script, run the nc command firstly. The default port is 1234. Then execute exploit.py, follow the tips and input required contents...

8.8CVSS8.1AI score0.52272EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/03 5:10 p.m.1 views

CVE-2019-11447_reverse_shell_upload

CVE-2019-11447 CuteNews 2.1.2 Reverse Shell Upload A slightly modified version of the Mt-Code POC which spawns a full reverse shell rather than a web shell. This exploit uses the famous PentestMonkey PHP Reverse Shell. Install pip install -r requirements.txt Example use: Create a user on the...

8.8CVSS7.2AI score0.52272EPSS
SaveExploits12References2
Kitploit
Kitploit
added 2026/09/02 12:40 a.m.5 views

cve-2019-11447

CVE-2019-11447 CutePHP Cute News 2.1.2 RCE PoC Target : 2.1.2 This PoC script is based on a simple implementation of the original exploit by BobbySox. The original exploit is an MSF module by Akuss. This script needs the target ip address or domain along with credentials and it will automatically...

8.8CVSS8.1AI score0.52272EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/01 3:27 p.m.5 views

WordPress-Path-Traversal-CVE-2019-11447

ペネトレーションテストレポート WordPress パストラバーサル - CVE-2019-11447 ドキュメント情報...

8.8CVSS8.1AI score0.52272EPSS
SaveExploits12
RedhatCVE
RedhatCVE
added 2026/01/09 10:11 a.m.16 views

CVE-2019-11447

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatarfile field to index.php?mod=main=personal. There is no effective control of $imgsize in /core/modules/dashboard.php. The header content of a...

8.8CVSS7.2AI score0.52272EPSS
SaveExploits12References1
GithubExploit
GithubExploit
added 2024/02/11 9:36 p.m.251 views

Exploit for Unrestricted Upload of File with Dangerous Type in Cutephp Cutenews

sadnews CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept POC...

9.3CVSS8.8AI score0.52272EPSS
SaveExploits13
zdt
zdt
added 2021/03/18 12:00 a.m.991 views

CuteNews 2.1.2 Shell Upload Exploit

CuteNews version 2.1.2 Avatar upload remote shell upload exploit. Original discovery of remote shell upload in this version is attributed to Ozkan Mustafa Akkus in April of 2019. ! /usr/bin/env python3 Exploit Title: CuteNews 2.1.2 - Avatar upload RCE Authenticated Exploit Author: Mayank Deshmukh...

8.8CVSS0.5AI score0.52272EPSS
SaveExploits12
GithubExploit
GithubExploit
added 2021/03/17 12:07 p.m.110 views

Exploit for Unrestricted Upload of File with Dangerous Type in Cutephp Cutenews

CVE-2019-11447 Exploit/PoC - CuteNews 2.1.2 Avatar upload RCE...

8.8CVSS8.9AI score0.52272EPSS
SaveExploits12
Packet Storm
Packet Storm
added 2021/03/17 12:00 a.m.1121 views

CuteNews 2.1.2 Shell Upload

! /usr/bin/env python3 Exploit Title: CuteNews 2.1.2 - Avatar upload RCE Authenticated Exploit Author: Mayank Deshmukh Date: 2021-03-17 Vendor Homepage: https://cutephp.com/ Software Link: https://cutephp.com/click.php?cutenewslatest Version: 2.1.2 CVE: CVE-2019-11447 CVE Reference:...

6.5CVSS8.7AI score0.52272EPSS
SaveExploits12
GithubExploit
GithubExploit
added 2020/10/30 8:21 a.m.73 views

Exploit for Unrestricted Upload of File with Dangerous Type in Cutephp Cutenews

CVE-2019-11447-EXP CuteNews Avatar 2.1.2 Remote Code Executio...

8.8CVSS3.9AI score0.52272EPSS
SaveExploits12
GithubExploit
GithubExploit
added 2020/10/18 1:49 p.m.151 views

Exploit for Unrestricted Upload of File with Dangerous Type in Cutephp Cutenews

CVE-2019-11447 - PoC Exploits CuteNews 2.1.2 via poor file up...

8.8CVSS0.3AI score0.52272EPSS
SaveExploits12
Check Point Advisories
Check Point Advisories
added 2020/09/29 12:00 a.m.44 views

CutePHP Cutenews Remote Code Execution (CVE-2019-11447)

A remote code execution vulnerability exists in CutePHP CuteNews. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.5CVSS5.2AI score0.52272EPSS
SaveExploits12
Packet Storm
Packet Storm
added 2020/09/10 12:00 a.m.703 views

CuteNews 2.1.2 Remote Code Execution

Exploit Title: CuteNews 2.1.2 - Remote Code Execution Google Dork: N/A Date: 2020-09-10 Exploit Author: Musyoka Ian Vendor Homepage: https://cutephp.com/cutenews/downloading.php Software Link: https://cutephp.com/cutenews/downloading.php Version: CuteNews 2.1.2 Tested on: Ubuntu 20.04, CuteNews...

6.5CVSS0.52272EPSS
SaveExploits12
Openbugbounty
Openbugbounty
added 2019/11/30 7:07 p.m.20 views

livedronenews.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1026695 Security Researcher g0bl1nsec Helped patch 3766 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting livedronenews.com website...

0.2AI score
SaveExploits0
CVE
CVE
added 2019/04/22 4:01 a.m.374 views

CVE-2019-11447

CVE-2019-11447 affects CuteNews 2.1.2 (CutePHP CuteNews). The vulnerability allows remote code execution via the avatar upload process: an attacker can place a crafted file in avatar_file for index.php?mod=main&opt=personal, exploiting insufficient validation of image size ($imgsize) in /core/mod...

8.8CVSS8.7AI score0.52272EPSS
SaveIn wildExploits12References3Affected Software1
Circl
Circl
added 2019/04/15 12:00 a.m.17 views

CVE-2019-11447

creationtimestamp| type| source ---|---|--- 2019-04-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46698 2020-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48800 2024-11-14 06:07:03+00:00| seen| MISP/e0a2986c-7c54-4933-95c6-841854d50e7f...

8.8CVSS6.8AI score0.52272EPSS
SaveExploits12References2
Rows per page
Query Builder