joaoaugustom/IPFire_2.19_RCE_Authenticated

PoC

This exploit is based on CVE-2017-9757 and was built upon the original exploit by 0x09AL.

view exploit source poc_in_githubauthor joaoaugustompublished 2026-08-08catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2017-9757US	high8.8	37.4% (99th)	Exploit	2017-06-19
IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell. This can be exploited directly by authenticated user…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.