.. / CVE-2022-31126

• RCE
• Nuclei
• Web

Exploit for Roxy-WI <6.1.1.0 - Remote Code Execution (CVE-2022-31126)

Description:

Roxy-WI before 6.1.1.0 is susceptible to remote code execution. System commands can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file.

Nuclei Template

View the template here CVE-2022-31126.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-31126.yaml

References: