CVE-2023-53945
HIGHBrainyCP 1.0 - Authenticated Remote Code Execution via Crontab Configuration Injection
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-53945. PoCs published by Ahmet Ümit BAYRAM.
AI-analyzed exploit summary This exploit leverages authenticated access to BrainyCP to add a malicious cron job, executing a reverse shell via netcat. It requires valid credentials and targets a cron job management feature.
Description
BrainyCP 1.0 contains an authenticated remote code execution vulnerability that allows logged-in users to inject arbitrary commands through the crontab configuration interface. Attackers can exploit the crontab endpoint by adding a malicious command that spawns a reverse shell to a specified IP and port.
Exploits (1)
This exploit leverages authenticated access to BrainyCP to add a malicious cron job, executing a reverse shell via netcat. It requires valid credentials and targets a cron job management feature.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H