Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-50898. PoCs published by p1ckzi.
AI-analyzed exploit summary This exploit leverages an authenticated file upload vulnerability in NanoCMS v0.4 to achieve remote code execution by uploading a PHP reverse shell. The script automates login, file upload, and optional execution of the uploaded payload.
Description
NanoCMS 0.4 contains an authenticated file upload vulnerability that allows remote code execution through unvalidated page content creation. Authenticated attackers can upload PHP files with arbitrary code to the server's pages directory by exploiting the page creation mechanism without proper input sanitization.
Exploits (1)
This exploit leverages an authenticated file upload vulnerability in NanoCMS v0.4 to achieve remote code execution by uploading a PHP reverse shell. The script automates login, file upload, and optional execution of the uploaded payload.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H