EDB-46987

PoC

Sitecore 8.x - Deserialization Remote Code Execution

view exploit source exploit_dbtype webappsauthor Jarad Kopfpublished 2019-06-13catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-11080US	high8.8	13.9% (97th)	Exploit	2019-06-06
Sitecore Experience Platform (XP) prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS # 293863. An authenticated user with necessary permissions is a…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.