CVE-2018-17936

Related Files

Nuuo Central Management Server 2.4 Authenticated Arbitrary File Upload

Posted Feb 20, 2019

Authored by Pedro Ribeiro | Site metasploit.com

The COMMITCONFIG verb is used by a CMS client to upload and modify the configuration of the CMS Server. The vulnerability is in the FileName parameter, which accepts directory traversal (..\\..\\) characters. Therefore, this function can be abused to overwrite any files in the installation drive of CMS Server. This vulnerability is exploitable in CMS versions up to and including 2.4.

tags | exploit

advisories | CVE-2018-17936

SHA-256 | 6d033ef3029641056b2c16198f8f5b9e4b8492af096081aed986b20a206dd234

Download | Favorite | View

NUUO CMS Session Tokens / Traversal / SQL Injection

Posted Jan 21, 2019

Authored by Pedro Ribeiro

NUUO CMS suffers from directory traversal, predictable session token, unauthenticated remote code execution, and various other vulnerabilities. Multiple metasploit modules included and various versions are affected by the various vulnerabilities.

tags | exploit, remote, vulnerability, code execution

advisories | CVE-2018-17888, CVE-2018-17890, CVE-2018-17892, CVE-2018-17894, CVE-2018-17934, CVE-2018-17936, CVE-2018-18982

SHA-256 | 273126839ae6bdeeeeb0b494ac7067a5ea7b4bb5683ea0378c2a64b28c581aee

Download | Favorite | View