cve/2017/CVE-2017-15220.md

CVE-2017-15220

Description

Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to execute arbitrary code.

POC

Reference

• https://www.exploit-db.com/exploits/42973/

Github

• https://github.com/Parist0nH1ll/Vulnerabilities-Write-Ups