cve/2018/CVE-2018-3786.md

CVE-2018-3786

Description

A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument.

POC

Reference

• https://hackerone.com/reports/388936
• https://hackerone.com/reports/388936

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/erik-krogh/egg-scripts-CVE-2018-3786
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/ossf-cve-benchmark/CVE-2018-3786