CVE-2022-39986

This repository contains a functional exploit for CVE-2022-39986, targeting RaspAP versions 2.8.0 to 2.8.7. It includes a Bash script for scanning and exploiting vulnerable instances, along with a PHP reverse shell payload for remote code execution.

The repository contains a functional Python script that exploits CVE-2022-39986, an unauthenticated remote code execution vulnerability in RaspAP versions 2.8.0 to 2.8.6. The exploit sends a crafted POST request to the `/ajax/openvpn/del_ovpncfg.php` endpoint with a command injection payload in the `cfg_id` parameter.

This Metasploit module exploits an unauthenticated command injection vulnerability in RaspAP versions 2.8.0 through 2.8.7 via the cfg_id parameter in /ajax/openvpn/activate_ovpncfg.php and /ajax/openvpn/del_ovpncfg.php. It allows arbitrary command execution in the context of the user running RaspAP.