CVE-2018-9059
CRITICALEasy File Sharing Web Server 7.2 - Remote Code Execution via Malicious Login Request
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2018-9059.
PoCs published by Hashim Jawad, rebeyond, manojcode, including Metasploit module exploits/windows/http/easyfilesharing_seh.
AI-analyzed exploit summary This exploit leverages a buffer overflow in Easy File Sharing Web Server 7.2 via the 'UserID' parameter, bypassing DEP using ROP chains to execute arbitrary shellcode. The payload is a standard calc.exe shellcode generated with msfvenom.
Description
Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791.
Exploits (4)
This exploit leverages a buffer overflow in Easy File Sharing Web Server 7.2 via the 'UserID' parameter, bypassing DEP using ROP chains to execute arbitrary shellcode. The payload is a standard calc.exe shellcode generated with msfvenom.
This exploit targets a stack buffer overflow in Easy File Sharing Web Server 7.2 via a malicious login request. It uses a crafted payload with a JMP ESP instruction and shellcode to execute calc.exe on the remote server.
This is a functional exploit for CVE-2018-9059, targeting a buffer overflow in Easy File Sharing Web Server 7.2. It includes a ROP chain to bypass DEP and achieve remote code execution.
This Metasploit module exploits a SEH overflow in Easy File Sharing HTTP Server 7.2 via a crafted HTTP GET request. It leverages a known CVE (2018-9059) to achieve remote code execution by overwriting the SEH record and executing shellcode.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H