0xNullComet/CVE-2016-10204_Webshell

PoC

A bash script demonstrating the manual exploitation of CVE-2016-10204 against a target endpoint, leading to upload of a php webshell.

view exploit source poc_in_githubauthor 0xNullCometpublished 2025-11-09catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-10204US	critical9.8	2.08% (81st)	Exploit	2017-03-03
SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.