CVE-2020-15920
CRITICAL EXPLOITED NUCLEIMida eFramework <= 2.9.0 - Unauthenticated Remote Code Execution via OS Command Injection
Title source: llmExploitation Summary
CVE-2020-15920 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 2 public exploits from researchers including elbae, elbae, bcoles, including a Metasploit module exploits/linux/http/mida_solutions_eframework_ajaxreq_rce.
A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit leverages an OS command injection vulnerability in Mida eFramework's PDC/ajaxreq.php endpoint, allowing remote code execution by injecting commands into the PARAM parameter. The PoC sends a crafted POST request with a command payload to execute arbitrary commands on the target system.
Description
There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. No authentication is required.
Exploits (2)
This exploit leverages an OS command injection vulnerability in Mida eFramework's PDC/ajaxreq.php endpoint, allowing remote code execution by injecting commands into the PARAM parameter. The PoC sends a crafted POST request with a command payload to execute arbitrary commands on the target system.
This Metasploit module exploits a command injection vulnerability in Mida Solutions eFramework's ajaxreq.php, allowing unauthenticated RCE as the apache user, which can then escalate to root via sudo misconfiguration. The exploit sends a crafted POST request with a malicious PARAM parameter to execute arbitrary commands.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H