CVE-2023-39147

CVE-2023-39147 affects Uvdesk 1.1.3, describing an arbitrary file upload vulnerability that allows attackers to execute arbitrary code via uploading a crafted image file. Public references describe a remote code execution path through an uploaded shell (e.g., authenticated exploit in Uvdesk 1.1.3...

Uvdesk 1.1.3 Shell Upload

Exploit Title: Uvdesk v1.1.3 - File Upload Remote Code Execution RCE Authenticated Date: 28/07/2023 Exploit Author: Daniel Barros @cupc4k3d - Hakai Offensive Security Vendor Homepage: https://www.uvdesk.com Software Link: https://github.com/uvdesk/community-skeleton Version: 1.1.3 Example: python...

CVE-2023-39147

An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafted image file...

Uvdesk v1.1.3 - File Upload Remote Code Execution (Authenticated) Exploit

Exploit Title: Uvdesk v1.1.3 - File Upload Remote Code Execution RCE Authenticated Exploit Author: Daniel Barros @cupc4k3d - Hakai Offensive Security Vendor Homepage: https://www.uvdesk.com Software Link: https://github.com/uvdesk/community-skeleton Version: 1.1.3 Example: python3 CVE-2023-39147....

Uvdesk v1.1.3 - File Upload Remote Code Execution (RCE) (Authenticated)

Exploit Title: Uvdesk v1.1.3 - File Upload Remote Code Execution RCE Authenticated Date: 28/07/2023 Exploit Author: Daniel Barros @cupc4k3d - Hakai Offensive Security Vendor Homepage: https://www.uvdesk.com Software Link: https://github.com/uvdesk/community-skeleton Version: 1.1.3 Example: python...

CVE-2023-39147

creationtimestamp| type| source ---|---|--- 2023-07-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51639 2023-08-02 13:18:29+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8780 2023-08-03 16:21:52+00:00| published-proof-of-concept|...