Lucene search
+L

1 matches found

Metasploit
Metasploit
added 2024/12/19 12:0 a.m.407 views

Craft CMS Twig Template Injection RCE via FTP Templates Path

This module exploits a Twig template injection vulnerability in Craft CMS by abusing the --templatesPath argument. The vulnerability allows arbitrary template loading via FTP, leading to Remote Code Execution RCE. Module Options msf use exploit/linux/http/craftcms/ftptemplate msf...

9.8CVSS8.9AI score0.97446EPSS
SaveExploits9
Rows per page
Query Builder