CVE-2020-11108
HIGHPi-Hole heisenbergCompensator Blocklist OS Command Execution
Title source: metasploitExploitation Summary
EIP tracks 6 public exploits for CVE-2020-11108.
PoCs published by Photubias, Metasploit, Nick Frichette, including Metasploit module exploits/unix/http/pihole_blocklist_exec.
AI-analyzed exploit summary This exploit targets CVE-2020-11108, a vulnerability in Pi-hole <=4.4.0 + Web <=4.3.3, allowing authenticated remote code execution via command injection in the blocklist settings. It creates a backdoor PHP file and triggers execution via a crafted request.
Description
The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abused for Remote Code Execution by writing to a PHP file in the web directory. (Also, it can be used in conjunction with the sudo rule for the www-data user to escalate privileges to root.) The code error is in gravity_DownloadBlocklistFromUrl in gravity.sh.
Exploits (6)
This exploit targets CVE-2020-11108, a vulnerability in Pi-hole <=4.4.0 + Web <=4.3.3, allowing authenticated remote code execution via command injection in the blocklist settings. It creates a backdoor PHP file and triggers execution via a crafted request.
This Metasploit module exploits CVE-2020-11108 in Pi-Hole <= 4.4 by adding a malicious blocklist, forcing a gravity update to write a PHP backdoor, and escalating privileges via teleporter.php. It achieves remote code execution with root privileges.
This exploit targets Pi-hole <= 4.4 by leveraging an authenticated RCE vulnerability. It uses a multi-stage payload to upload and execute a reverse shell via PHP code injection in the blocklist settings.
This exploit targets Pi-hole <= 4.4 by leveraging an authenticated RCE vulnerability (CVE-2020-11108) via a malicious blocklist URL to upload and execute a PHP payload, resulting in a reverse shell.
This repository contains two Python scripts demonstrating remote code execution (RCE) in Pi-hole <= 4.4 via CVE-2020-11108. The first script achieves a reverse shell as www-data, while the second escalates privileges to root by overwriting teleporter.php.
This Metasploit module exploits CVE-2020-11108 in Pi-Hole <= 4.4 by adding a malicious blocklist, forcing a gravity update to write PHP payloads to the webroot, and achieving root privilege escalation via teleporter.php.
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H