fuzzlove/eLabFTW-1.8.5-EntityController-Arbitrary-File-Upload-RCE

PoC

eLabFTW 1.8.5 'EntityController' Arbitrary File Upload / RCE (CVE-2019-12185)

view exploit source poc_in_githubauthor fuzzlovepublished 2019-05-18catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-12185UShigh8.8Exploit
eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An attacker can use a us…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan