CVE-2022-46604

CVE-2022-46604

Supported by supplied evidence

The README, exploit script header, and Dockerfile all reference CVE-2022-46604 and target Responsive FileManager v9.9.5, which matches the CVE description. The exploit script implements a file creation extension bypass to achieve RCE.

Prerequisites

• Docker must be installed to build and run the container.Dockerfile:1
• Python 3 and the packages in requirements.txt must be installed to run the exploit.requirements.txt:1-3CVE-2022-46604-exploit.py:1
• The target container must be running and accessible over HTTP on port 80.Dockerfile:28-29CVE-2022-46604-exploit.py:82

Evidence-described exercise path

1. Build the Docker image using the provided Dockerfile.Dockerfile:1-34
2. Run a container from the built image, ensuring port 80 is exposed.Dockerfile:28-29
3. Execute the exploit script against the running container, providing the target IP or hostname.CVE-2022-46604-exploit.py:55-60
4. The script retrieves a PHPSESSID, sends a POST request to create a webshell, verifies its presence, and optionally enters an interactive command loop.CVE-2022-46604-exploit.py:90-155

No harmful behavior observed

The exploit script targets only the lab's own vulnerable application inside the container. It does not attempt to escape the container, access the host, or connect to external systems. The Dockerfile does not include privileged mode, host mounts, or other directives that would compromise the host. All behavior is consistent with demonstrating the CVE.