CVE-2018-16763

Fuel CMS 1.4.1 - Exécution de code à distance FUEL CMS 1.4.1 permet l'évaluation de code PHP via le paramètre filter de pages/select/ ou le paramètre data de preview/. Cela peut conduire à une exécution de code à distance sans authentification. Installation root@kitploit: git clone...

exploit_cms_fuel

Fuel CMS 1.4.1 - Exploit di Remote Code Execution RCE Questo repository contiene un'implementazione in Python 3 di un exploit per Fuel CMS versione 1.4.1. Lo script sfrutta CVE-2018-16763 , una vulnerabilità in cui una validazione insufficiente degli input nei parametri filter e preview consente ...

CVE-2018-16763

CVE-2018-16763 Analyzer CVE-2018-16763 Analyzer è un piccolo progetto Python per analizzare CVE-2018-16763 contro target FUEL CMS. Si concentra sul verificare se un target appare vulnerabile e sul mostrare l'output dei comandi in modo più pulito e leggibile quando la risposta dell'applicazione è...

CVE-2018-16763_FuelCMS-1.4.1_RCE

CVE-2018-16763 FuelCMS - 1.4.1 - RCE PoC FuelCMS 1.4.1 ermöglicht die Auswertung von PHP-Code über den Filterparameter pages/select/ oder den Datenparameter preview/. Dies kann zu einer Remote-Codeausführung ohne vorherige Authentifizierung führen. Exploit Dies funktioniert durch Ausnutzung des...

CVE_2018_16763_Proof_of_Concept

CVE-2018-16763 Proof-of-Concept Ein Proof-of-Concept PoC Exploit für CVE-2018-16763 Fuel CMS – Preauthenticated Remote Code Execution. Beschreibung Dieses Python-3-Programm dient als PoC für die Schwachstelle CVE-2018-16763 im Content-Management-System Fuel CMS. Konkret ermöglicht die Schwachstel...

THM-Vulnerability_Capstone-CVE-2018-16763

THM-VulnerabilityCapstone-CVE-2018-16763 Ein Write-up über den THM-Raum Vulnerability Capstone & Exploit-Skript für CVE-2018-16763. DANKSAGUNGEN Ich beanspruche keine Anerkennung für die Entdeckung dieser Schwachstelle. Danke an die folgenden Personen. Entdeckung der Schwachstelle: 0xd0ff9...

EUVD-2020-4145

Malware in sbrugna...

CVE-2020-11803

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the user-provided input is passed directly to the php eval function. The user has to be authenticated...

CVE-2020-11803

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the user-provided input is passed directly to the php eval function. The user has to be authenticated...

Input validation

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the user-provided input is passed directly to the php eval function. The user has to be authenticated...

CVE-2020-11803

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the user-provided input is passed directly to the php eval function. The user has to be authenticated...

CVE-2020-11803

CVE-2020-11803 affects SpamTitan 7.07. The issue arises from improper sanitization of the jaction parameter on mailqueue.php, where user input is passed directly to PHP eval(), enabling server-side code evaluation after authentication. Exploitation details are documented in multiple connected sou...

Remote code execution

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution...

CVE-2018-16763

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution...

CVE-2018-16763

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution...

CVE-2018-16763

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution...

CVE-2018-16763

Summary (CVE-2018-16763) : Fuel CMS version 1.4.1 is vulnerable to a pre-auth Remote Code Execution via PHP code evaluation. The flaw is triggered through unsafe handling of user-controlled data in the pages/select/ filter parameter or the preview/ data parameter, allowing arbitrary PHP execution...

CVE-2018-16763

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution. Recent assessments: noraj at May 08, 2021 7:33pm UTC reported: Unauthenticated RCE with default config, this is critical. Assessed...