CVE-2021-44967
HIGHLimeSurvey 5.2.4 - Authenticated Remote Code Execution via Plugin Upload
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2021-44967. PoCs published by Y1LD1R1M, D3Ext, monke443.
AI-analyzed exploit summary This exploit demonstrates an authenticated RCE in LimeSurvey 5.2.4 by uploading a malicious plugin via the plugin manager, then activating it to trigger a reverse shell. It chains CSRF token retrieval, authentication, plugin upload, installation, and activation.
Description
A Remote Code Execution (RCE) vulnerabilty exists in LimeSurvey 5.2.4 via the upload and install plugins function, which could let a remote malicious user upload an arbitrary PHP code file. NOTE: the Supplier's position is that plugins intentionally can contain arbitrary PHP code, and can only be installed by a superadmin, and therefore the security model is not violated by this finding.
Exploits (5)
This exploit demonstrates an authenticated RCE in LimeSurvey 5.2.4 by uploading a malicious plugin via the plugin manager, then activating it to trigger a reverse shell. It chains CSRF token retrieval, authentication, plugin upload, installation, and activation.
This is a functional exploit for CVE-2021-44967, an authenticated RCE vulnerability in LimeSurvey 5.2.x. It leverages plugin upload functionality to deploy a reverse shell.
This exploit leverages an authenticated RCE vulnerability in LimeSurvey 5.2.4 by uploading a malicious plugin containing a PHP reverse shell. The script automates login, plugin upload, installation, activation, and execution to achieve remote command execution.
This is a functional exploit for CVE-2021-44967, which allows authenticated users to upload a malicious PHP plugin to LimeSurvey, leading to remote code execution via a reverse shell. The script automates authentication, plugin upload, activation, and payload delivery.
This repository contains a functional exploit for CVE-2021-44967, an authenticated RCE vulnerability in LimeSurvey. The exploit automates the process of logging in, uploading a malicious plugin, and triggering a reverse shell.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H