CVEs-PoC/2020/CVE-2020-16148.md

CVE-2020-16148

Description

The ping page of the administration panel in Telmat AccessLog <= 6.0 (TAL_20180415) allows an attacker to get root shell access via authenticated code injection over the network.

POC

Reference

• https://podalirius.net/cves/2020-16148/
• https://podalirius.net/en/cves/2020-16148/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/p0dalirius/p0dalirius