CVE-2018-19422

This is an edited version of the CVE-2018-19422 exploit to fix an small but annoying issue I had.

SubrionCMS-421-File-upload-RCE-auth- This is an edited version of the CVE-2018-19422 exploit to fix an small but annoying issue I had I had to use this exploit in a CTF but I could not get it to properly exploit, just kept failing to login After an unholy amount of time I finally figured out why It was an issue with the url argument When I specified a url, the program aut

CVE-2018-19422 Authenticated Remote Code Execution

CVE-2018-19422-SubrionCMS-RCE SubrionCMS 421 Authenticated Remote Code Execution /panel/uploads in Subrion CMS 421 allows remote attackers to execute arbitrary PHP code via a pht or phar file, because the htaccess file omits these Exploit Usage Commands: Windows/Linux: $ sudo python3 subrionRCEpy -u IP/panel/ -l <user> -p <password&gt