EDB-51669

PoC

Pyro CMS 3.9 - Server-Side Template Injection (SSTI) (Authenticated)

view exploit source exploit_dbtype webappsauthor Daniel Barrospublished 2023-08-08catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-29689UScritical9.8Exploit
PyroCMS 3.9 contains a remote code execution (RCE) vulnerability that can be exploited through a server-side template injection (SSTI) flaw. This vulnerability allows a malicious a…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan