CVE-2012-10028

Summary

Netwin SurgeFTP version 23c8 and prior contains a vulnerability in its web-based administrative console that allows authenticated users to execute arbitrary system commands via crafted POST requests to surgeftpmgr.cgi. This can lead to full remote code execution on the underlying system.

Affected Software

Weaknesses

• CWE-78: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/netwin_surgeftp_exec.rb
• https://www.exploit-db.com/exploits/23522
• https://www.exploit-db.com/exploits/23601

References

• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/netwin_surgeftp_exec.rb
• https://www.exploit-db.com/exploits/23522
• https://www.exploit-db.com/exploits/23601
• https://netwinsite.com/surgeftp/
• https://www.vulncheck.com/advisories/netwin-surgeftp-auth-rce

• ←Previous
• Next→