CVEs-PoC/2021/CVE-2021-35504.md

CVE-2021-35504

Description

Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the ffmpeg binary.

POC

Reference

• https://syntegris-sec.github.io/filerun-advisory

Github

• https://github.com/20142995/Goby
• https://github.com/ARPSyndicate/cvemon
• https://github.com/HimmelAward/Goby_POC
• https://github.com/NyxAzrael/Goby_POC
• https://github.com/Z0fhack/Goby_POC