EDB-31983

PoC

Plex Media Server 0.9.9.2.374-aa23a69 - Multiple Vulnerabilities

view exploit source exploit_dbtype webappsauthor SEC Consultpublished 2014-02-28catalog exploit_db
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2014-9304UShigh7.5Exploit
Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist, conduct SSRF attacks, and execute arbitrary administrative actions via multiple crafted…
CVE-2014-9181USmedium5.0Exploit
Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrary files via a .. (dot dot) in the URI to (1) manage/ or (2)…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan