CVE-2025-69212

This repository contains a functional exploit for CVE-2025-69212, an OS command injection vulnerability in OpenSTAManager <= 2.9.8. The exploit leverages a malicious filename in a ZIP archive to inject commands via the `decodeP7M()` function, which unsafely passes user-controlled input to `exec()`.

This Python script exploits an RCE vulnerability in OpenSTAManager by uploading a malicious ZIP file containing a P7M file with command injection, triggering a reverse shell. It requires authentication and targets a specific endpoint in the documents module.

This exploit demonstrates a command injection vulnerability (CVE-2025-69212) in OpenSTAManager <= 2.9.8 via a maliciously crafted ZIP filename during upload. The PoC achieves RCE by injecting a base64-encoded reverse shell payload into an unsanitized `exec()` call in `src/Util/XML.php`.

This exploit targets CVE-2025-69212, a file upload vulnerability in a web application that allows authenticated attackers to upload a malicious ZIP file. The exploit leverages improper filename handling in the ZIP extraction process to inject a PHP webshell via command injection in the filename.

This repository contains a detailed penetration testing report for the Hack The Box machine 'Enigma', including a critical finding for CVE-2025-69212, an authenticated OS command injection in OpenSTAManager. The report references external PoC code but does not include the exploit code itself, focusing instead on technical analysis and attack chain documentation.

This PoC exploits CVE-2025-69212, an OS command injection vulnerability in OpenSTAManager <=2.9.8 via malicious ZIP archive upload. The exploit leverages improper handling of P7M file decoding to achieve unauthenticated remote command execution by embedding a PHP webshell in a crafted ZIP file.

This repository contains a functional exploit for CVE-2025-69212, an authenticated RCE vulnerability in OpenSTAManager <= 2.9.8. The exploit leverages a malicious ZIP upload with a crafted filename to achieve arbitrary command execution via a webshell.

This repository contains a functional exploit for CVE-2025-69212, demonstrating an OS command injection vulnerability via a maliciously crafted ZIP file with a .p7m filename. The exploit uploads the file to a vulnerable endpoint and achieves remote code execution through a PHP shell.

This repository contains a functional exploit for CVE-2025-69212, an authenticated remote code execution vulnerability in OpenSTAManager <= 2.9.8. The exploit leverages command injection via a crafted .p7m filename in the single-file importer plugin, allowing arbitrary command execution as the web user.

This repository contains a functional exploit for CVE-2025-69212, demonstrating an OS command injection vulnerability in OpenSTAManager via a malicious .p7m filename in a ZIP upload. The exploit crafts a ZIP file with a command-injected filename and sends it to the target endpoint to achieve remote code execution.

This repository contains a functional proof-of-concept exploit for CVE-2025-69212, demonstrating an OS command injection vulnerability in OpenSTAManager's P7M file processing. The exploit leverages a malicious filename in a ZIP archive to execute arbitrary commands via the `exec()` function.