CVE-2021-27964

SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Config/SaveUploadedHotspotLogoFile without any authentication or session header. There is no check for the file extension or content of the uploaded file...

SonLogger Arbitrary File Upload (CVE-2021-27964)

An arbitrary file upload vulnerability exists in SonLogger. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

SonLogger 4.2.3.3 Shell Upload

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SonLogger Arbitrary File Upload Exploit', 'Description' = %q This module exploits an unauthenticated arbitrary file upload via insecure POST...

SonLogger 4.2.3.3 - Unauthenticated Arbitrary File Upload Exploit

This Metasploit module exploits an unauthenticated arbitrary file upload via an insecure POST request in SonLogger. It has been tested on version less than 6.4.1 in Windows 10 Enterprise. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2021-27964

creationtimestamp| type| source ---|---|--- 2021-03-05 07:47:07+00:00| seen| https://t.me/cibsecurity/24493 2021-03-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49651 2021-09-21 06:42:51+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/104 2021-12-12...

CVE-2021-27964

CVE-2021-27964 affects SonLogger prior to 6.4.1. It enables unauthenticated arbitrary file upload via POST to /Config/SaveUploadedHotspotLogoFile without validating file extension/content, enabling remote code execution and potential full server compromise as described in connected sources. Remed...