CVE-2018-19422

CVE-2018-19422 root@kitploit: Exploit Title: File Upload Bypass to RCE Authenticated Google Dork: N/A Date: 17/05/2021 Exploit Author: Drew Alleman Based on an exploit written by: Fellipe Oliveira Vendor Homepage: https://subrion.org/ Software Link: https://github.com/intelliants/subrion Version:...

CVE-2018-19422-SubrionCMS-RCE

CVE-2018-19422-SubrionCMS-RCE SubrionCMS 4.2.1 Esecuzione Remota di Codice Autenticata /panel/uploads in Subrion CMS 4.2.1 consente a un attaccante remoto di eseguire codice PHP arbitrario tramite un file .pht o .phar, poiché il file .htaccess omette queste estensioni. Uso dell'Exploit Comandi:...

SubrionCMS-4.2.1-File-upload-RCE-auth-

SubrionCMS-4.2.1-File-upload-RCE-auth- Questa è una versione modificata dell'exploit CVE-2018-19422 per risolvere un piccolo ma fastidioso problema che avevo. Ho dovuto usare questo exploit in un CTF, ma non riuscivo a farlo funzionare correttamente; continuava a fallire il login. Dopo un tempo...

Subrion CMS 4.2.1 - Arbitrary File Upload

Exploit Title: Subrion CMS 4.2.1 - File Upload Bypass to RCE Authenticated Date: 17/05/2021 Exploit Author: Fellipe Oliveira Vendor Homepage: https://subrion.org/ Software Link: https://github.com/intelliants/subrion Version: SubrionCMS 4.2.1 Tested on: Debian9, Debian 10 and Ubuntu 16.04 CVE:...

Subrion CMS 4.2.1 Shell Upload

Exploit Title: File Upload Bypass to RCE Authenticated Google Dork: N/A Date: 17/05/2021 Exploit Author: Fellipe Oliveira Vendor Homepage: https://subrion.org/ Software Link: https://github.com/intelliants/subrion Version: SubrionCMS 4.2.1 Tested on: Debian9, Debian 10 and Ubuntu 16.04 CVE :...