CVE-2019-11354
HIGHEA Origin 10.5.36 - Remote Code Execution via Origin2 URI Handler Template Injection
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-11354. PoCs published by Metin Yunus Kandemir.
AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in dotProject 2.1.9 via the `event_id` and `project_id` parameters. It includes payloads for boolean-based blind, error-based, time-based blind, and UNION query attacks.
Description
The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler. This can be used to escape the underlying AngularJS sandbox and achieve remote code execution via an origin2://game/launch URL for QtApplication QDesktopServices communication.
Exploits (1)
This exploit demonstrates SQL injection vulnerabilities in dotProject 2.1.9 via the `event_id` and `project_id` parameters. It includes payloads for boolean-based blind, error-based, time-based blind, and UNION query attacks.
References (12)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H