.. / CVE-2014-1203

• RCE
• Nuclei
• Web

Exploit for Eyou E-Mail <3.6 - Remote Code Execution (CVE-2014-1203)

Description:

Eyou Mail System before 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to admin/domain/ip_login_set/d_ip_login_get.php via the get_login_ip_config_file function.

Nuclei Template

View the template here CVE-2014-1203.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2014/CVE-2014-1203.yaml

References: