Rejetto HttpFileServer 2.3.x - Remote Command Execution (CVE-2014-6287)

🚨 About the Exploit

This is a proof-of-concept exploit for the well-known Remote Command Execution vulnerability in Rejetto HttpFileServer (HFS) v2.3.x, identified as CVE-2014-6287.

By abusing the vulnerable search functionality, an attacker can inject a specially crafted payload to execute arbitrary system commands on the target machine.

---

📌 Details

• Exploit Title: Rejetto HttpFileServer 2.3.x - Remote Command Execution (RevShell)
• CVE: CVE-2014-6287
• Author: Z3R0 (0x30)
• Version Affected: HttpFileServer v2.3.x