CVE-2019-10867

Related Files

Pimcore Unserialize Remote Code Execution

Posted Apr 29, 2019

Authored by Daniele Scanu, Fabio Cogno | Site metasploit.com

This Metasploit module exploits a PHP unserialize() in Pimcore before 5.7.1 to execute arbitrary code. An authenticated user with "classes" permission could exploit the vulnerability. The vulnerability exists in the "ClassController.php" class, where the "bulk-commit" method makes it possible to exploit the unserialize function when passing untrusted values in "data" parameter. Tested on Pimcore 5.4.0-5.4.4, 5.5.1-5.5.4, 5.6.0-5.6.6 with the Symfony unserialize payload. Tested on Pimcore 4.0.0-4.6.5 with the Zend unserialize payload.

tags | exploit, arbitrary, php

advisories | CVE-2019-10867

SHA-256 | e9668485fecf0de5fb772aff42ff232d1d7e80b39adcab869e40e189d37c4459

Download | Favorite | View