CVE-2021-32305

This exploit targets an unauthenticated remote code execution vulnerability in Websvn 2.6.0 by injecting a command into the search parameter, which executes a reverse shell payload. The payload is URL-encoded and sent via a GET request to the vulnerable endpoint.

This repository contains a functional exploit for CVE-2021-32305, a command injection vulnerability in WebSVN 2.6.0. The exploit leverages an unauthenticated command injection flaw in the search.php endpoint by injecting a payload via the search parameter.