by Kastro
Paper/Archive/CVE-2023-54339

CVE-2023-54339

jokkedk Webgrind — Webgrind 1.1 - Remote Command Execution (RCE) via dataFile Parameter

EPSS 2%public exploitCVSS 9.8
critical.is priorityof 100
55
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 77.2.772 × 2015.4Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Webgrind 1.1 contains a remote command execution vulnerability that allows unauthenticated attackers to inject OS commands via the dataFile parameter in index.php. Attackers can execute arbitrary system commands by manipulating the dataFile parameter, such as using payload '0%27%26calc.exe%26%27' to execute commands on the target system.

Affected

ProductAffectedFixed inSource
Webgrind1.1–CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitexploit-db.com/exploits/51074refgithub.com/jokkedk/webgrindwriteupvulncheck.com/advisories/webgrind-remote-command-execution-rce-via-datafile-parameter