diff --git a/URVE/CVE-2020-29552/README.md b/URVE/CVE-2020-29552/README.md new file mode 100644 index 0000000..3dece40 --- /dev/null +++ b/URVE/CVE-2020-29552/README.md @@ -0,0 +1,9 @@ +# URVE 2020.03.24 RCE (CVE-2020-29552) + +An issue was discovered in URVE Build 24.03.2020. By using the _internal/pc/vpro.php?mac=0&ip=0&operation=0&usr=0&pass=0;powershell+-c+\" substring, it is possible to execute a Powershell command and redirect its output to a file under the web root. + +FOFA **query rule**: [body="URVE"](https://fofa.so/result?qbase64=Ym9keT0iVVJWRSI%3D) + +# Demo + +![URVE_2020_03_24_RCE_CVE_2020_29552](URVE_2020_03_24_RCE_CVE_2020_29552.gif)