CVEs-PoC/2021/CVE-2021-41382.md

CVE-2021-41382

Description

Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface.

POC

Reference

• http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Improper-Access-Control.html
• http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Insecure-Direct-Object-Reference.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/basubanakar/Plastic-SCM-Exploit
• https://github.com/ph4nt0m-py/Plastic-SCM-Exploit