CVE-2017-11366 PoC — Codiad 安全漏洞

Source

https://github.com/hidog123/Codiad-CVE-2018-14009

Associated Vulnerability

Title: Codiad 安全漏洞 (CVE-2017-11366)
Description:components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type.

Description

Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689

Readme

1. install codiad  


 @  git clone https://github.com/Codiad/Codiad.git
 


Steps to reproduction
    1. Setup a vulnerable environment on ubuntu server with Codiad 2.8.4 (latest version)
   
      @  chmod o+w config.php
      @  chmod o+w workspace
      @  chmod o+w plugins
      @  chmod o+w themes
      @  chmod o+w data
      
    2.
    @  git clone https://github.com/hidog123/Codiad-CVE-2018-14009.gi
    
    3. Launch the exploit and then get a reverse shell

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →