mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-07 03:02:30 +00:00
1.1 KiB
1.1 KiB
CVE-2019-16663
Description
An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to search.crud.php because the catCommand parameter is passed to the exec function without filtering, which can lead to command execution.
POC
Reference
No PoCs from references.
Github
- https://github.com/0ps/pocassistdb
- https://github.com/0xT11/CVE-POC
- https://github.com/SexyBeast233/SecBooks
- https://github.com/TheCyberGeek/CVE-2019-19268
- https://github.com/alphaSeclab/sec-daily-2019
- https://github.com/developer3000S/PoC-in-GitHub
- https://github.com/fab1ano/rconfig-cves
- https://github.com/hectorgie/PoC-in-GitHub
- https://github.com/jweny/pocassistdb
- https://github.com/mhaskar/CVE-2019-16663