sh4den/CVE-2022-26265

PoC

The first proof of concept of the Contao CMS RCE

view exploit source poc_in_githubauthor sh4denpublished 2022-12-01catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-26265US	critical9.8	30.4% (98th)	Exploit	2022-03-18
Contao Managed Edition v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the component php_cli parameter.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.