6 matches found
Numbas Remote Code Execution
Exploit Title: Numbas v7.3 - Remote Code Execution Google Dork: N/A Date: March 7th, 2024 Exploit Author: Matheus Boschetti Vendor Homepage: https://www.numbas.org.uk/ Software Link: https://github.com/numbas/Numbas Version: 7.2 and below Tested on: Linux CVE: CVE-2024-27612 import sys, requests,...
Numbas < v7.3 - Remote Code Execution Exploit
Exploit Title: Numbas v7.3 - Remote Code Execution Exploit Author: Matheus Boschetti Vendor Homepage: https://www.numbas.org.uk/ Software Link: https://github.com/numbas/Numbas Version: 7.2 and below Tested on: Linux CVE: CVE-2024-27612 import sys, requests, re, argparse, subprocess, time from bs...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
CVE-2024-27612
The Numbas editor (versions 7.2 and below ) is vulnerable to Remote Code Execution (RCE) due to the mishandling of theme and extension edits. This Improper Input Validation (CWE-20) allows an attacker to execute arbitrary code on a target system. Proof-of-concept exploits are available, such as t...
