Lucene search
+L

1 matches found

Metasploit
Metasploit
added 2025/01/24 6:55 p.m.407 views

Craft CMS Twig Template Injection RCE via FTP Templates Path

This module exploits a Twig template injection vulnerability in Craft CMS by abusing the --templatesPath argument. The vulnerability allows arbitrary template loading via FTP, leading to Remote Code Execution RCE. Module Options msf use exploit/linux/http/craftcmsftptemplate msf...

9.8CVSS9.2AI score0.97446EPSS
SaveExploits9
Rows per page
Query Builder