Exploitation Summary
EIP tracks 3 public exploits for CVE-2018-14009. PoCs published by WangYihang, lolameroo, hidog123.
AI-analyzed exploit summary This exploit targets CVE-2018-14009 in Codiad 2.8.4, achieving authenticated remote code execution via command injection in the file search functionality. It supports both Windows (PowerShell) and Linux (Bash) payloads for reverse shell establishment.
Description
Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.
Exploits (3)
This exploit targets CVE-2018-14009 in Codiad 2.8.4, achieving authenticated remote code execution via command injection in the file search functionality. It supports both Windows (PowerShell) and Linux (Bash) payloads for reverse shell establishment.
This repository contains a functional exploit for CVE-2018-14009, targeting Codiad 2.8.4. The exploit leverages command injection in the file search functionality to achieve remote code execution (RCE) on both Windows and Linux systems.
This exploit targets CVE-2018-14009 in Codiad 2.8.4, leveraging a command injection vulnerability in the file search functionality to achieve remote code execution (RCE). It supports both Windows (PowerShell) and Linux (Bash) payloads for reverse shell establishment.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H