ronin-rb / community-pocs

A repository of PoCs for ronin-exploits
https://ronin-rb.dev
GNU General Public License v3.0
0 stars 2 forks source link

Add PoC exploit for CVE-2018-15961 #17

Open postmodern opened 3 months ago

postmodern commented 3 months ago

Add a PoC exploit for CVE-2018-15961, arbitrary file upload that code lead to code execution in ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier.

Reference PoCs

Vuln App

How to Submit a PoC

See the CONTRIBUTING file for instructions on how to submit a PoC exploit.

postmodern commented 2 months ago

This requires Ronin::Support::Network::HTTP supporting multi-part file uploads. ronin-rb/ronin-support#504.