Exploitation Summary
EIP tracks 2 public exploits for CVE-2019-15954.
PoCs published by Metasploit, Riccardo Krauter, sinn3r, including Metasploit module exploits/multi/http/totaljs_cms_widget_exec.
AI-analyzed exploit summary This Metasploit module exploits CVE-2019-15954, a JavaScript code injection vulnerability in Total.js CMS 12, allowing authenticated admin users to execute arbitrary commands via a malicious widget. The exploit uses a cmdstager to deliver a payload for remote code execution.
Description
An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (RCE) on the remote server by creating a malicious widget with a special tag containing JavaScript code that will be evaluated server side. In the process of evaluating the tag by the back-end, it is possible to escape the sandbox object by using the following payload: <script total>global.process.mainModule.require(child_process).exec(RCE);</script>
Exploits (2)
This Metasploit module exploits CVE-2019-15954, a JavaScript code injection vulnerability in Total.js CMS 12, allowing authenticated admin users to execute arbitrary commands via a malicious widget. The exploit uses a cmdstager to deliver a payload for remote code execution.
This Metasploit module exploits a JavaScript code injection vulnerability in Total.js CMS 12, allowing authenticated admin users to execute arbitrary commands via a malicious widget. The exploit uses a cmdstager to deliver a payload for remote code execution.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H