CVE-2021-47794
HIGHZesleCP < 3.1.9 - Authenticated Remote Code Execution via FTP Account Creation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-47794. PoCs published by numan türle.
AI-analyzed exploit summary This exploit targets ZesleCP <=3.1.9 with an authenticated RCE via FTP account creation. It injects a reverse shell payload into the FTP password field, leveraging command injection to execute arbitrary commands.
Description
ZesleCP 3.1.9 contains an authenticated remote code execution vulnerability that allows attackers to create malicious FTP accounts with shell injection payloads. Attackers can exploit the FTP account creation endpoint by injecting a reverse shell command that establishes a network connection to a specified listening host.
Exploits (1)
This exploit targets ZesleCP <=3.1.9 with an authenticated RCE via FTP account creation. It injects a reverse shell payload into the FTP password field, leveraging command injection to execute arbitrary commands.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H