Exploitation Summary
EIP tracks 2 public exploits for CVE-2014-125126.
PoCs published by Metasploit, including Metasploit module exploits/unix/webapp/simple_e_document_upload_exec.
AI-analyzed exploit summary This Metasploit module exploits an arbitrary file upload vulnerability in Simple E-Document versions 3.0 to 3.1, allowing remote code execution as the web server user by bypassing authentication via a cookie manipulation.
Description
An unrestricted file upload vulnerability exists in Simple E-Document versions 3.0 to 3.1 that allows an unauthenticated attacker to bypass authentication by sending a specific cookie header (access=3) with HTTP requests. The application’s upload mechanism fails to restrict file types and does not validate or sanitize user-supplied input, allowing attackers to upload malicious .php scripts. Authentication can be bypassed entirely by supplying a specially crafted cookie (access=3), granting access to the upload functionality without valid credentials. If file uploads are enabled on the server, the attacker can upload a web shell and gain remote code execution with the privileges of the web server user, potentially leading to full system compromise.
Exploits (2)
This Metasploit module exploits an arbitrary file upload vulnerability in Simple E-Document versions 3.0 to 3.1, allowing remote code execution as the web server user by bypassing authentication via a cookie manipulation.
This Metasploit module exploits an arbitrary file upload vulnerability in Simple E-Document versions 3.0 to 3.1, allowing unauthenticated attackers to upload and execute malicious PHP files, resulting in remote code execution as the web server user.
References (4)
Scores
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N