EmbedThis GoAhead Remote Code Execution (CVE-2021-42342)

An unrestricted file upload vulnerability exists in EmbedThis GoAhead Web Server. The vulnerability is due to improper validation of user form variables passed to the file upload filter...

Exploit for Unrestricted Upload of File with Dangerous Type in Embedthis Goahead

CVE-2021-42342 CVE-2021-42342 RCE POC1:just prints c in...

CVE-2021-42342

CVE-2021-42342 affects EmbedThis GoAhead Web Server (GoAhead) prior to 5.1.5. The issue is in the file upload filter: user form variables can reach CGI scripts without the CGI_ prefix, allowing untrusted environment variables to be passed and enabling remote code execution. Affected component: fi...

Exploit for Unrestricted Upload of File with Dangerous Type in Embedthis Goahead

Goahead webserver pre v5.1.5 RCE PoC CVE-2021-42342 A rec...