CVE-2023-0315

Related Files

Froxlor 2.0.3 Stable Remote Code Execution

Posted Apr 6, 2023

Authored by Askar

Froxlor version 2.0.3 Stable suffers from a remote code execution vulnerability.

tags | exploit, remote, code execution

advisories | CVE-2023-0315

SHA-256 | 92d4d06936e944880eba0462ca060e3c5cf5fd5faa7fb6127b2b6e5ba0d6af0a

Download | Favorite | View

Froxlor 2.0.6 Remote Command Execution

Posted Feb 23, 2023

Authored by Askar, jheysel-r7 | Site metasploit.com

Froxlor versions 2.0.6 and below suffer from a bug that allows authenticated users to change the application logs path to any directory on the OS level which the user www-data can write without restrictions from the backend which leads to writing a malicious Twig template that the application will render. That leads to remote command execution under the user www-data.

tags | exploit, remote

advisories | CVE-2023-0315

SHA-256 | a4048c5b1f41c4347f4543f9ad125a92d70622eb396c52b2aaf555132f774674

Download | Favorite | View