.. / CVE-2018-16763

• RCE
• Nuclei
• Web

Exploit for FUEL CMS 1.4.1 - Remote Code Execution (CVE-2018-16763)

Description:

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter.

Nuclei Template

View the template here CVE-2018-16763.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-16763.yaml

References: