CVE-2019-18839
CRITICALFUDForum 3.0.9 - Stored Cross-Site Scripting and Remote Code Execution via nlogin Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-18839. PoCs published by fuzzlove-group.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2019-18839 and CVE-2019-18873, demonstrating stored XSS vulnerabilities in FUDForum 3.0.9 that can lead to remote code execution. The exploit leverages XSS via username and user-agent fields to execute arbitrary JavaScript, which then uploads a PHP shell to the target system.
Description
FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to fully compromise the system using a POST request. When the admin visits the user information, the payload will execute. This will allow for PHP files to be written to the web root, and for code to execute on the remote server.
Exploits (1)
This repository contains a functional exploit for CVE-2019-18839 and CVE-2019-18873, demonstrating stored XSS vulnerabilities in FUDForum 3.0.9 that can lead to remote code execution. The exploit leverages XSS via username and user-agent fields to execute arbitrary JavaScript, which then uploads a PHP shell to the target system.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H