CVE-2019-25137

This exploit leverages an XSLT injection vulnerability in Umbraco CMS to achieve remote code execution by authenticated administrators. It uses a crafted XSLT payload with embedded C# code to execute arbitrary commands (e.g., calc.exe).

This repository provides a detailed technical analysis of CVE-2019-25137, an XSLT injection vulnerability in Umbraco CMS. It includes a breakdown of the exploit mechanism, affected versions, and proof-of-concept payloads demonstrating remote code execution.

This repository contains a functional exploit for CVE-2019-25137, an authenticated RCE vulnerability in Umbraco. The exploit leverages XSLT script injection to execute arbitrary commands on the target system.