CVE-2022-46604 PoC — Tecrail Responsive FileManager 代码问题漏洞

Source

Associated Vulnerability

Description

Responsive FileManager v.9.9.5 vulnerable to CVE-2022-46604.

Readme

# ResponsiveFileManager-CVE-2022-46604
Responsive FileManager v.9.9.5 vulnerable to CVE-2022-46604 (File Creation Extension Bypass which leads to RCE).

The current exploit is made in Python 3 and exploits the vulnerability to upload a webshell which allows the remote execution of commands in the vulnerable host.

## References
- Exploit Database (Exploit-DB): https://www.exploit-db.com/exploits/51251
- Packet Storm Security: https://packetstormsecurity.com/files/171720/Responsive-FileManager-9.9.5-Remote-Shell-Upload.html

### Demo

![CVE-2022-46604 exploit PoC](CVE-2022-46604-exploit-PoC.png "CVE-2022-46604 exploit PoC")

File Snapshot

 [4.0K]  /data/pocs/00be967406c03d17192eb57705aac48bf20cc6ea
├── [233K]  CVE-2022-46604-exploit-PoC.png
├── [6.2K]  CVE-2022-46604-exploit.py
├── [ 742]  Dockerfile
├── [ 34K]  LICENSE
├── [ 631]  README.md
├── [  34]  requirements.txt
└── [1.6M]  responsive_filemanager_v9.9.5.zip

0 directories, 7 files

Remarks