Files
CVEs-PoC/2017/CVE-2017-18025.md
2025-09-29 21:09:30 +02:00

719 B

CVE-2017-18025

Description

cgi-bin/drknow.cgi in Innotube ITGuard-Manager 0.0.0.1 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the username field, as demonstrated by a username beginning with "admin|" to use the '|' metacharacter.

POC

Reference

Github

No PoCs found on GitHub currently.