EDB-40064

functional

GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Execution

view exploit source exploit_dbverifiedtype remoteauthor Dawid Golunskipublished 2016-07-06catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2016-4971UShigh8.8Exploit
GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan