5 matches found
goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342-
Goahead 웹서버 v5.1.5 미만 RCE PoC CVE-2021-42342 Goahead Webserver의 최근 버그가 William Bowling에 의해 발견되었으며, 이로 인해 공격받은 서버에서 RCE가 발생합니다. 이 문제는 5.1.5 미만 버전에 존재하며, Shodan에 따르면 약 280만 개의 인터넷 서버가 이에 해당합니다. 현재 CVE도 공개되었습니다 https://nvd.nist.gov/vuln/detail/CVE-2021-42342 RCE의 원인은 파일 업로드 필터가 활성화된 경우 사용자가 파일을 업로드함...
EmbedThis GoAhead Remote Code Execution (CVE-2021-42342)
An unrestricted file upload vulnerability exists in EmbedThis GoAhead Web Server. The vulnerability is due to improper validation of user form variables passed to the file upload filter...
Exploit for Unrestricted Upload of File with Dangerous Type in Embedthis Goahead
CVE-2021-42342 CVE-2021-42342 RCE POC1:just prints c in...
CVE-2021-42342
CVE-2021-42342 affects EmbedThis GoAhead Web Server (GoAhead) prior to 5.1.5. The issue is in the file upload filter: user form variables can reach CGI scripts without the CGI_ prefix, allowing untrusted environment variables to be passed and enabling remote code execution. Affected component: fi...