CVE-2019-18873
CRITICALFUDForum 3.0.9 - Stored Cross-Site Scripting and Remote Code Execution via User-Agent Header
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2019-18873. PoCs published by liquidsky, fuzzlove, fuzzlove-group.
AI-analyzed exploit summary This exploit leverages stored XSS vulnerabilities in FUDForum 3.0.9 to achieve remote code execution by uploading a PHP shell. The attack involves injecting malicious JavaScript via username or user-agent fields, which executes when an admin views user information.
Description
FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in remote code execution. An attacker can use a user account to fully compromise the system via a GET request. When the admin visits user information under "User Manager" in the control panel, the payload will execute. This will allow for PHP files to be written to the web root, and for code to execute on the remote server. The problem is in admsession.php and admuser.php.
Exploits (3)
This exploit leverages stored XSS vulnerabilities in FUDForum 3.0.9 to achieve remote code execution by uploading a PHP shell. The attack involves injecting malicious JavaScript via username or user-agent fields, which executes when an admin views user information.
This repository contains a functional exploit for CVE-2019-18873 and CVE-2019-18839, targeting FUDForum 3.0.9. The exploit leverages stored XSS vulnerabilities in the username and User-Agent fields to achieve remote code execution by uploading a PHP shell.
This repository contains a functional exploit for CVE-2019-18873 and CVE-2019-18839, demonstrating stored XSS vulnerabilities in FUDForum 3.0.9 that can lead to remote code execution. The exploit includes detailed steps and a JavaScript payload (fud.js) that, when triggered by an admin, uploads a PHP shell to the target system.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H