CVE-2009-0545

EXPLOITED NUCLEI

ZeroShell <1.0beta11 - Command Injection

Title source: llm

Description

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.

Exploits (2)

exploitdb WORKING POC VERIFIED

by ikki · textremotehardware

https://www.exploit-db.com/exploits/8023

View Code ZIP pw:eip

metasploit WORKING POC EXCELLENT

by Yann CAM · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zeroshell_exec.rb

View Code ZIP pw:eip

Nuclei Templates (1)

ZeroShell <= 1.0beta11 Remote Code Execution

CRITICALby geeknik

Shodan: http.title:"zeroshell"

FOFA: title="zeroshell"

References (6)

[Exploit] http://www.ikkisoft.com/stuff/LC-2009-01.txt

[Patch, Vendor Advisory] http://www.zeroshell.net/eng/announcements/

[Patch] http://www.zeroshell.net/eng/patch-details/#C100

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/500763/100/0/threaded

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/8023

[Third Party Advisory] http://www.vupen.com/english/advisories/2009/0385

Scores

EPSS 0.9401

EPSS Percentile 99.9%

Exploitation Intel

VulnCheck KEV 2019-06-13

Classification

CWE

CWE-20

Status draft

Affected Products (11)

zeroshell/zeroshell

Timeline

Published Feb 12, 2009

Tracked Since Feb 18, 2026