Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution (RCE) Exploit (Fixed Version)

Description

This is an exploit for the Apache HTTP Server 2.4.49 vulnerability identified as CVE-2021-41773. The original version of the exploit published on Exploit-DB contained syntax and execution errors, so this version has been fixed to ensure proper operation in Linux environments.

Corrections made

• Fixed incorrect syntax in the if structure.
• Fixed the for loop to ensure its correct execution.
• Added proper validation of arguments.
• Improved readability and error handling.
• Included permission and execution verification.

Usage

chmod +x PoC.sh
./50383.sh targets.txt /etc/passwd

Usage Example

File targets.txt (target list):

http://192.168.1.100
http://vulnerable-site.com

Run the exploit to read /etc/passwd:

./50383.sh targets.txt /etc/passwd

Run the exploit to execute a command on the target system:

./50383.sh targets.txt /bin/sh whoami