CVEs-PoC/2013/CVE-2013-3632.md

CVE-2013-3632

Description

The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter.

POC

Reference

• https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats
• https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats

Github

No PoCs found on GitHub currently.