Xn2/GLPwn

PoC

GLPI automatic exploitation tool for CVE-2020-15175

view exploit source poc_in_githubauthor Xn2published 2022-03-14catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-15175US	critical9.1	69.9% (99th)	Exploit	2020-10-07
In GLPI before version 9.5.2, the `pluginimage.send.php` endpoint allows a user to specify an image from a plugin. The parameters can be maliciously crafted to instead delete the…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.