.. / CVE-2020-15920

• RCE
• Nuclei
• Web

Exploit for Mida eFramework <=2.9.0 - Remote Command Execution (CVE-2020-15920)

Description:

Mida eFramework through 2.9.0 allows an attacker to achieve remote code execution with administrative (root) privileges. No authentication is required.

Nuclei Template

View the template here CVE-2020-15920.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-15920.yaml

References: