Exploitation Summary
EIP tracks 3 public exploits for CVE-2022-0848. PoCs published by Chetanya Sharma, dskmehra, Lay0us.
AI-analyzed exploit summary This exploit leverages a file upload vulnerability in part-db 0.5.11 to upload a malicious PHP shell, achieving remote code execution. The script crafts a PHP file with a system command, uploads it via a POST request, and retrieves the shell location for further exploitation.
Description
OS Command Injection in GitHub repository part-db/part-db prior to 0.5.11.
Exploits (3)
This exploit leverages a file upload vulnerability in part-db 0.5.11 to upload a malicious PHP shell, achieving remote code execution. The script crafts a PHP file with a system command, uploads it via a POST request, and retrieves the shell location for further exploitation.
This exploit leverages a file upload vulnerability in part-db 0.5.11 to achieve remote code execution by uploading a malicious PHP file. The script automates the process of uploading the file and retrieving the shell location.
This exploit leverages a file upload vulnerability in part-db 0.5.11 to achieve remote code execution by uploading a malicious PHP file. The script automates the process of uploading the payload and retrieving the shell location.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H