CVE-2018-17431

This exploit targets a remote code execution vulnerability in Comodo Unified Threat Management Web Console versions before 2.7.0 and 1.5.0. It crafts a malicious URL with encoded commands to disable SSH, leveraging improper input validation in the web console.

This PoC exploits a remote command execution vulnerability in Comodo UTM via the web console by sending crafted HTTP requests with URL-encoded commands. The exploit disables SSH as a demonstration of arbitrary command execution.

This PoC exploits a remote command execution vulnerability in Comodo UTM via the web console by sending crafted HTTP requests with URL-encoded commands. It demonstrates disabling SSH by simulating webshell input.