CVEs-PoC/2020/CVE-2020-1956.md

CVE-2020-1956

Description

Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.

POC

Reference

No PoCs from references.

Github

• https://github.com/0day404/vulnerability-poc
• https://github.com/0xT11/CVE-POC
• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Addy-shetty/Laazy_sqli-labs
• https://github.com/ArrestX/--POC
• https://github.com/J1ezds/Vulnerability-Wiki-page
• https://github.com/KayCHENvip/vulnerability-poc
• https://github.com/Miraitowa70/POC-Notes
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/SexyBeast233/SecBooks
• https://github.com/Threekiii/Awesome-POC
• https://github.com/XiaomingX/awesome-poc-for-red-team
• https://github.com/b510/CVE-2020-1956
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/n0-traces/cve_monitor
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/soosmile/POC