EDB-49045

PoC

October CMS Build 465 - Arbitrary File Read Exploit (Authenticated)

view exploit source exploit_dbtype webappsauthor Sivanesh Ashokpublished 2020-11-13catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-5295USmedium4.9Exploit
In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to read local files of an October CMS server.…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan