CVE-2018-18387
HIGHplaySMS < 1.4.2 - Privilege Escalation via Daemon Abuse
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2018-18387. PoCs published by TheeBlind.
AI-analyzed exploit summary This exploit abuses a privilege escalation vulnerability in playSMS <= 1.4.2 by injecting a reverse shell into the init.php file, which is included by a root-run daemon. The attacker must have write access to the playSMS directory and the daemon must be running as root.
Description
playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse.
Exploits (1)
This exploit abuses a privilege escalation vulnerability in playSMS <= 1.4.2 by injecting a reverse shell into the init.php file, which is included by a root-run daemon. The attacker must have write access to the playSMS directory and the daemon must be running as root.
References (1)
Scores
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H