CVE-2021-20837 PoC — Six Apart Movable Type 操作系统命令注入漏洞

Source

https://github.com/ghost-nemesis/cve-2021-20837-poc

Associated Vulnerability

Title: Six Apart Movable Type 操作系统命令注入漏洞 (CVE-2021-20837)
Description:Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002 and earlier (Movable Type Advanced 7 Series), Movable Type Advanced 6.8.2 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.46 and earlier, and Movable Type Premium Advanced 1.46 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability.

Description

PoC for the CVE-2021-20837 : RCE in MovableType

Readme

# cve-2021-20837-poc
PoC for the CVE-2021-20837 : RCE in MovableType

This vulnerability was discovered with the collaboration of [The.Criminal.One](https://the.criminal.one/).
This PoC was developped by him. 

BLOG POST: https://nemesis.sh/posts/movable-type-0day/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →