0x240x23elu/CVE-2020-28948-and-CVE-2020-28949

PoC

0x240x23elu/CVE-2020-28948-and-CVE-2020-28949

view exploit source poc_in_githubauthor 0x240x23elupublished 2020-11-27catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-28948UShigh7.8Exploit
Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan