CVEs-PoC/2018/CVE-2018-15906.md

CVE-2018-15906

Description

SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file.

POC

Reference

• http://packetstormsecurity.com/files/151473/SolarWinds-Serv-U-FTP-15.1.6-Privilege-Escalation.html
• http://seclists.org/fulldisclosure/2019/Feb/4

Github

No PoCs found on GitHub currently.