EDB-37597
functionalAccellion FTA - getStatus verify_oauth_token Command Execution (Metasploit)
view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2015-07-13catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-2857US | critical9.8 | Exploit | ||
Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token parameter. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan