CVE-2024-42640
CRITICAL EXPLOITED NUCLEIangular-base64-upload <v0.1.21 - RCE
Title source: llmExploitation Summary
CVE-2024-42640 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 5 public exploits from researchers including Ravindu Wickramasinghe, rvzsec, rvizx. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit targets CVE-2024-42640, an unauthenticated RCE vulnerability in the Angular-Base64-Upload library prior to v0.1.21. It uploads a malicious PHP payload via base64 encoding to a vulnerable server endpoint, enabling remote command execution or a reverse shell.
Description
angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of previously uploaded content and enables the attacker to achieve code execution on the server. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Exploits (5)
This exploit targets CVE-2024-42640, an unauthenticated RCE vulnerability in the Angular-Base64-Upload library prior to v0.1.21. It uploads a malicious PHP payload via base64 encoding to a vulnerable server endpoint, enabling remote command execution or a reverse shell.
This exploit targets CVE-2024-42640, an unauthenticated RCE vulnerability in the Angular-Base64-Upload library prior to v0.1.21. It uploads a PHP reverse shell via a base64-encoded payload to a vulnerable endpoint and triggers execution.
This repository contains a functional exploit for CVE-2024-42640, an unauthenticated RCE vulnerability in the Angular-Base64-Upload library prior to v0.1.21. The exploit uploads a malicious PHP payload via the vulnerable server.php endpoint and provides either a reverse shell or command shell interface.
This repository contains a functional exploit for CVE-2024-42640, an unauthenticated remote code execution vulnerability in the `angular-base64-upload` library prior to v0.1.21. The exploit leverages a file upload vulnerability in the `demo/server.php` endpoint to achieve RCE via a PHP web shell or reverse shell.
The repository contains a functional Python exploit for CVE-2024-42640, which targets an unauthenticated RCE vulnerability in the angular-base64-upload library (versions < 0.1.21). The exploit uploads a malicious PHP shell via the vulnerable endpoint and verifies its execution by checking for a specific string in the response.
Nuclei Templates (1)
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H