EDB-44899

PoC

Nikto 2.1.6 - CSV Injection

view exploit source exploit_dbtype localauthor Adam Greenhillpublished 2018-06-18catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-11652US	critical9.8	23.6% (98th)	Exploit	2018-06-01
CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly in…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.