.. / CVE-2020-7980

• RCE
• Nuclei
• Web

Exploit for Satellian Intellian Aptus Web <= 1.24 - Remote Command Execution (CVE-2020-7980)

Description:

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed.

Nuclei Template

View the template here CVE-2020-7980.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-7980.yaml

References: