EDB-43431

PoC

gps-server.net GPS Tracking Software < 3.1 - Multiple Vulnerabilities

view exploit source exploit_dbtype webappsauthor Noman Riffatpublished 2018-01-05catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2017-17098US	critical9.8	6.64% (94th)	Exploit	2018-01-02
The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self hosted) through 3.0 allows remote attackers to inject arbitrary PHP code via a crafted request…
CVE-2017-17097US	critical9.8	6.95% (94th)	Exploit	2018-01-02
gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords upon an unauthenticated request, and then sends e-mail with…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.