CodoForum V5.1 authenticated RCE | My first CVE
Jul 5, 2022
Press enter or click to view image in full size![]()
This article is going to be about how I found my first CVE(Common Vulnerabilities ad Exposures)/zero-day vulnerability.
Vulnerable Application and CVE details
Name: CodoForum
Version: 5.1
Vendor: CodoLogicCVE ID: CVE-2022-31854
Vulnerability type: Authenticated Remote Code Execution via File Upload
Exploit
- Start a NetCat reverse shell on the attacker machine
nc -lvnp 9999Press enter or click to view image in full size![]()
2. Login to the admin panel
Press enter or click to view image in full size![]()
3. Go to the ‘Global Settings’ pane
Press enter or click to view image in full size![]()
4. Edit the IP and port number in the reverse shell file
Press enter or click to view image in full size![]()
5. Upload the reverse shell from the logo upload option
Press enter or click to view image in full size![]()
6. Once uploaded, access the file from the path http://[codoforum site]/sites/default/assets/img/attachments/[file].php
Press enter or click to view image in full size![]()
7. Go to the path and get shell access from the NetCat connection established earlier
Press enter or click to view image in full size![]()
PWNED!
Exploit code:
