Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2020-27976 — osCommerce Phoenix CE <=1.0.5.4 Authenticated RCE | Kitploit
Tools/GitHubGitHub/k0rnh0li0/cve-2020-27976
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingPayload Development
GitHubk0rnh0li0/cve-2020-27976

CVE-2020-27976

osCommerce Phoenix CE <=1.0.5.4 Authenticated RCE

View Repository
5125 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2020-27976 Exploit osCommerce Phoenix CE <=1.0.5.4 Authenticated RCE

osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. Within admin/mail.php, a form POST parameter can be passed to the application. This affects the PHP mail function, and the sendmail -f option.

This exploit uploads a specified payload file to the base directory of a vulnerable Phoenix CE installation. You must use valid credentials to the installation's admin panel for and .

Usage: ./exploit.py - The URL of the Phoenix CE installation. - Username for the admin panel. - Password for the admin panel. - Path to the payload file to upload.

=== USER NOTES ===

  • The shell you upload will be embedded in a subject line in an email log file, and it may appear numerous times in the log. I've found that this can cause problems. So, you should end your PHP shell with a multiline comment (/*) instead of a closing brace (?>). This has produced the best results during testing.

  • Newlines in the payload are replaced with spaces before upload. ==================

Sources: https://www.tenable.com/cve/CVE-2020-27976 https://herolab.usd.de/security-advisories/usd-2020-0026/

Download Tool