cve/2021/CVE-2021-40323.md

CVE-2021-40323

Description

Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.

POC

Reference

No PoCs from references.

Github

• https://github.com/0day404/HV-2024-POC
• https://github.com/12442RF/POC
• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/AboSteam/POPC
• https://github.com/DMW11525708/wiki
• https://github.com/Lern0n/Lernon-POC
• https://github.com/Linxloop/fork_POC
• https://github.com/Warren-Jace/poc-doc
• https://github.com/WhosGa/MyWiki
• https://github.com/Yuan08o/pocs
• https://github.com/admin772/POC
• https://github.com/adminlove520/pocWiki
• https://github.com/adysec/POC
• https://github.com/cisp-pte/POC-20241008-sec-fork
• https://github.com/eeeeeeeeee-code/POC
• https://github.com/greenberglinken/2023hvv_1
• https://github.com/iemotion/POC
• https://github.com/laoa1573/wy876
• https://github.com/oLy0/Vulnerability
• https://github.com/wjlin0/poc-doc
• https://github.com/wooluo/POC00
• https://github.com/wy876/POC
• https://github.com/wy876/wiki