CVE-2015-1578
u5CMS < 3.9.3 - Open Redirect via pidvesa Cookie or uri Parameter
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2015-1578. PoCs published by KAhara MAnhara, yaldobaoth, Zeppperoni.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Achat 0.150 beta7, leveraging a crafted UDP packet to execute arbitrary code (calc.exe) via a msfvenom-generated payload. The payload is designed to bypass bad characters and trigger a reverse shell or command execution.
Description
Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) pidvesa cookie to u5admin/pidvesa.php or (2) uri parameter to u5admin/meta2.php.
Exploits (4)
This exploit targets a buffer overflow vulnerability in Achat 0.150 beta7, leveraging a crafted UDP packet to execute arbitrary code (calc.exe) via a msfvenom-generated payload. The payload is designed to bypass bad characters and trigger a reverse shell or command execution.
This is a Metasploit module for CVE-2015-1578, a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. It exploits the vulnerability via a crafted UDP packet to achieve remote code execution.
This is a functional proof-of-concept exploit for CVE-2015-1578, targeting a buffer overflow in Achat 0.150 beta7 on Windows. It dynamically generates a Unicode-encoded reverse shell payload using msfvenom and delivers it via UDP to achieve remote code execution.
This repository contains a Python3 rewrite of a remote buffer overflow exploit for Achat 0.150 beta7, designed to deliver a reverse shell via a crafted payload generated using msfvenom. The exploit targets a vulnerability in the Achat software, leveraging a buffer overflow to achieve remote code execution.