CVE-2019-12744

HIGH

SeedDMS versions < 5.1.11 - Remote Command Execution

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2019-12744 has a selected CVSS score of 7.5 (high); EIP currently links 2 catalogued exploits and 1 repository PoC.

Description

SeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of PHP scripts, a different vulnerability than CVE-2018-12940.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
2
Repository PoCs
1

Proofs of concept

3

Catalogued exploits

ExploitDBSeedDMS versions < 5.1.11 - Remote Command ExecutionExploitDB exploitby Nimit JainNot analyzed1 file
ExploitDB
PoC details
ExploitDBSeeddms 5.1.10 - Remote Command Execution (RCE) (Authenticated)ExploitDB exploitby Bryan LeongNot analyzed1 file
ExploitDB
PoC details

Repository PoCs

GitHubnobodyatall648/CVE-2019-12744Repository PoCby nobodyatall6481Not analyzed7 files

157.5 KiB

GitHub
PoC details

References

5