cve/2009/CVE-2009-0545.md

CVE-2009-0545

Description

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.

POC

Reference

• http://www.ikkisoft.com/stuff/LC-2009-01.txt
• https://www.exploit-db.com/exploits/8023

Github

• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/Elsfa7-110/kenzer-templates
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/gnarkill78/CSA_S2_2024