CVEs-PoC/2020/CVE-2020-12078.md

CVE-2020-12078

Description

An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit/configuration/ URI. An attacker can exploit this by adding an excluded IP address to the global discovery settings (internally called exclude_ip). This exclude_ip value is passed to the exec function in the discoveries_helper.php file (inside the all_ip_list function) without being filtered, which means that the attacker can provide a payload instead of a valid IP address.

POC

Reference

• http://packetstormsecurity.com/files/157477/Open-AudIT-Professional-3.3.1-Remote-Code-Execution.html
• https://shells.systems/open-audit-v3-3-1-remote-command-execution-cve-2020-12078/

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/84KaliPleXon3/CVE-2020-12078
• https://github.com/ARPSyndicate/cvemon
• https://github.com/SexyBeast233/SecBooks
• https://github.com/apachecn-archive/Middleware-Vulnerability-detection
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/lovechinacoco/https-github.com-mai-lang-chai-Middleware-Vulnerability-detection
• https://github.com/mhaskar/CVE-2020-12078
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/soosmile/POC
• https://github.com/tdtc7/qps