CVE-2020-25042
HIGHMaraCMS 7.5 - Authenticated Arbitrary File Upload via codebase/dir.php
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2020-25042.
PoCs published by 0blio_, Groppoxx, Michele Cisternino, Erik Wynter, including Metasploit module exploits/multi/http/maracms_upload_exec.
AI-analyzed exploit summary This exploit demonstrates an authenticated remote code execution vulnerability in Mara CMS 7.5 by uploading a malicious PHP file via the file upload functionality. The vulnerability arises due to insufficient file extension validation, allowing an attacker to upload a webshell.
Description
An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated (admin/manager) session and make a codebase/dir.php?type=filenew request to upload PHP code to codebase/handler.php.
Exploits (3)
This exploit demonstrates an authenticated remote code execution vulnerability in Mara CMS 7.5 by uploading a malicious PHP file via the file upload functionality. The vulnerability arises due to insufficient file extension validation, allowing an attacker to upload a webshell.
This repository contains a functional Python exploit for CVE-2020-25042, an authenticated arbitrary file upload vulnerability in Mara CMS 7.5. The exploit authenticates as an admin/manager, uploads a PHP payload via `codebase/handler.php`, and executes commands through the uploaded shell.
This Metasploit module exploits an arbitrary file upload vulnerability in MaraCMS 7.5 and prior to execute arbitrary commands. It authenticates, uploads a malicious PHP file, and triggers payload execution via HTTP requests.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H