CVEs-PoC/2018/CVE-2018-11342.md

CVE-2018-11342

Description

A path traversal vulnerability in fileExplorer.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a path to a file on the system to create folders via the dest_folder parameter.

POC

Reference

• http://seclists.org/fulldisclosure/2018/May/2
• http://seclists.org/fulldisclosure/2018/May/2

Github

• https://github.com/mefulton/asustorexploit