Published: 20/11/2017 Updated: 14/02/2024

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 506

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

In Laravel framework up to and including 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct request for the /.env URI. NOTE: this CVE is only about Laravel framework's writeNewEnvironmentFileWith function in src/Illuminate/Foundation/Console/KeyGenerateCommand.php, which uses file_put_contents without restricting the .env permissions. The .env filename is not used exclusively by Laravel framework.

Vulnerable Product	Search on Vulmon	Subscribe to Product
laravel laravel

## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## class MetasploitModule < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::Tcp include Msf::Exploit::Remote::HttpClient def initialize(info = {}) super(update_info(info, ...

This Metasploit module exploits a vulnerability in the PHP Laravel Framework for versions 5540, 56x up to 5629 Remote command execution is possible via a correctly formatted HTTP X-XSRF-TOKEN header, due to an insecure unserialize call of the decrypt method in Illuminate/Encryption/Encrypterphp Authentication is not required, however explo ...

Tools designed to solve everyday problems.

Rooon, fiuuu, Rooon, fiuuu Tools designed to solve everyday problems About alexa-grab: get top sites alexa bin-checker: credit card bins check cve-2017-16894: mass exploitation [cve-2017-16894] filter-unique-values: filter unique values from a list gerador-de-pessoa: generate a brazilian person get-proxy: get list proxy

Scans & Exploits

Scans & Exploits This repository is intented to archive Scans & Exploits written by my own Completed laravel_env_filepy - This script checks (and exploits) for Laravel's env disclosure CVE-2017-16894 laravel_debug_disclosurepy - This script checks for Laravel's Information disclosure via Debug activated cve_2021_3156sh - Checker for Sudo Heap-Base

CWE-200 http://whiteboyz.xyz/laravel-env-file-vuln.html https://twitter.com/finnwea/status/967709791442341888 http://packetstormsecurity.com/files/153641/PHP-Laravel-Framework-Token-Unserialize-Remote-Command-Execution.html https://nvd.nist.gov https://github.com/v4p0r/rooon-fiuuu https://www.exploit-db.com/exploits/47129

CVE-2017-16894

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect