admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-28 01:04:30 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2018/CVE-2018-1000885.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

883 B
Raw Blame History

CVE-2018-1000885

Description

PHKP version including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b contains a Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in function pgp_exec() phkp.php:98 that can result in It is possible to manipulate gpg-keys or execute commands remotely. This attack appear to be exploitable via HKP-Api: /pks/lookup?search.

POC

Reference

Github

No PoCs found on GitHub currently.