cve/2018/CVE-2018-15657.md

CVE-2018-15657

Description

An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter.

POC

Reference

• https://research.digitalinterruption.com/2019/01/31/multiple-vulnerabilities-found-in-mobile-device-management-software/
• https://www.exploit-db.com/exploits/46305/

Github

• https://github.com/ARPSyndicate/kenzer-templates