CVEs-PoC/2019/CVE-2019-14253.md

CVE-2019-14253

Description

An issue was discovered in servletcontroller in the secure portal in Publisure 2.1.2. One can bypass authentication and perform a query on PHP forms within the /AdminDir folder that should be restricted.

POC

Reference

• https://github.com/kmkz/exploit/blob/master/PUBLISURE-EXPLOIT-CHAIN-ADVISORY.txt

Github

No PoCs found on GitHub currently.