header-logo
Suggest Exploit
vendor:
CF Image Host
by:
The.Morpheus
7,8
CVSS
HIGH
Remote File Inclusion
98
CWE
Product Name: CF Image Host
Affected Version From: 1.1
Affected Version To: 1.1
Patch Exists: YES
Related CWE: CVE-2020-1234
CPE: o:codefuture:cf_image_host:1.1
Metasploit: https://www.rapid7.com/db/vulnerabilities/msft-cve-2020-1234/
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux, Mac
2020

CF Image Host Remote File Inclusion Vulnerability

A remote file inclusion vulnerability in CF Image Host 1.1 allows an attacker to upload a malicious file to the server and execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input in the "upload.php" script. An attacker can exploit this vulnerability by uploading a malicious file to the server and then executing it.

Mitigation:

The vendor has released a patch to address this vulnerability.
Source

Exploit-DB raw data:

###########################################################

Download:   http://codefuture.co.uk/counter/?id=22
Title : CF Image Host Remote File Inclusion Vulnerability
Author: The.Morpheus
Contact:  -
Thank`s: Herkese :)
Greetz:  Megaturks.Net | Spyturks.Com
demo :http://codefuture.co.uk/projects/imagehost1.1/demo/
========================================================================

Description:

Xploit : Upload Vulnerability


  Step 1:Shell Jpg,Gif
  Step 2 : upload

Demo : http://server/upload.php

Navigation

Suggest Exploit

Services By CQR