vendor:
MauryCMS
by:
athos
7.5
CVSS
HIGH
Remote Shell Upload
89
CWE
Product Name: MauryCMS
Affected Version From: 0.53.2
Affected Version To: 0.53.2
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
MauryCMS <= 0.53.2 Remote Shell Upload Exploit
This exploit allows an attacker to upload a malicious shell to the vulnerable MauryCMS version 0.53.2. The exploit uses an SQL injection vulnerability to gain access to the admin panel and then uploads the malicious shell. The malicious shell is then accessible via the URL http://host/path/file.php.
Mitigation:
Upgrade to the latest version of MauryCMS.
