Lucene search
+L

1 matches found

Metasploit
Metasploit
•added 2024/12/19 12:00 a.m.•427 views

Craft CMS Twig Template Injection RCE via FTP Templates Path

This module exploits a Twig template injection vulnerability in Craft CMS by abusing the --templatesPath argument. The vulnerability allows arbitrary template loading via FTP, leading to Remote Code Execution RCE. Module Options msf use exploit/linux/http/craftcms/ftptemplate msf...

9.8CVSS8.8AI score0.97482EPSS
SaveExploits9
Rows per page
Query Builder