EDB-50531
functionalSuiteCRM 7.11.18 - Remote Code Execution (RCE) (Authenticated) (Metasploit)
view exploit source exploit_dbverifiedtype webappsauthor M. Cory Billingtonpublished 2021-11-17catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-42840US | high8.8 | Exploit | ||
SuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account takeover, logger_file_name can… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan