CVE-2019-12185
HIGHelabftw 1.8.5 - Authenticated Arbitrary File Upload via EntityController
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2019-12185. PoCs published by liquidsky, fuzzlove, fuzzlove-group.
AI-analyzed exploit summary This exploit leverages an arbitrary file upload vulnerability in eLabFTW 1.8.5 via the EntityController component, allowing an authenticated attacker to upload a malicious PHP file and achieve remote code execution (RCE). The PoC includes a multipart/form-data payload with a PHP shell and automates the login and upload process.
Description
eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An attacker can use a user account to fully compromise the system using a POST request. This will allow for PHP files to be written to the web root, and for code to execute on the remote server.
Exploits (4)
This exploit leverages an arbitrary file upload vulnerability in eLabFTW 1.8.5 via the EntityController component, allowing an authenticated attacker to upload a malicious PHP file and achieve remote code execution (RCE). The PoC includes a multipart/form-data payload with a PHP shell and automates the login and upload process.
This repository contains a functional Python exploit for CVE-2019-12185, which leverages an arbitrary file upload vulnerability in eLabFTW 1.8.5's EntityController to achieve remote code execution. The exploit authenticates, crafts a multipart POST request with a malicious PHP payload, and uploads it to the server.
This repository contains a functional Python exploit for CVE-2019-12185, which leverages an arbitrary file upload vulnerability in eLabFTW 1.8.5's EntityController to achieve remote code execution (RCE). The exploit authenticates with provided credentials, crafts a multipart/form-data POST request to upload a malicious PHP file, and executes commands on the target system.
This repository contains a functional Python exploit for CVE-2019-12185, targeting eLabFTW 1.8.5. The exploit leverages an arbitrary file upload vulnerability in the 'EntityController' to achieve remote code execution (RCE) by uploading a malicious PHP file.
References (2)
Scores
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H