CVE-2022-4944
MEDIUMkodcloud kodexplorer < 4.49 - Cross-Site Request Forgery
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2022-4944. PoCs published by Mr Empy, brosck.
AI-analyzed exploit summary This exploit leverages a CSRF vulnerability in KodExplorer <= 4.49 to upload arbitrary files, enabling remote code execution via a webshell or reverse shell. It requires user interaction to trigger the file upload.
Description
A vulnerability, which was classified as problematic, has been found in kalcaddle KodExplorer up to 4.49. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.50 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-227000.
Exploits (3)
This exploit leverages a CSRF vulnerability in KodExplorer <= 4.49 to upload arbitrary files, enabling remote code execution via a webshell or reverse shell. It requires user interaction to trigger the file upload.
This PoC exploits CVE-2022-4944, a CSRF vulnerability in KODExplorer <= v4.49, to achieve remote code execution by tricking a victim into downloading a malicious PHP shell. It supports both webshell and reverse shell modes.
This repository contains a functional exploit for CVE-2022-4944, which leverages a CSRF vulnerability in KodExplorer <= 4.49 to upload a malicious PHP shell. The exploit supports both webshell and reverse shell modes, demonstrating remote code execution (RCE).
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N