elFinder CVE-2021-43421远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-43421
• https://github.com/Studio-42/elFinder/issues/3429
• https://github.com/projectdiscovery/nuclei-templates/issues/4090
• https://github.com/advisories/GHSA-x4jx-hjwf-gc99
• https://www.sentinelone.com/vulnerability-database/cve-2021-43421/
• https://pentest-tools.com/vulnerabilities-exploits/elfinder-2160-rce-vulnerability_13707
• https://www.tenable.com/cve/CVE-2021-43421
• https://www.miggo.io/vulnerability-database/cve/CVE-2021-43421
• https://wordpress.org/support/topic/security-vulnerability-95/

Related Vulnerabilities

• PoCCVE-2021-23394: elFinder < 2.1.58 - Remote Code Execution
• PoCCVE-2019-9194: elFinder <= 2.1.47 - Command Injection
• PoCCVE-2021-32682: elFinder 2.1.58 - Remote Code Execution
• PoCCVE-2021-43421: Studio-42 elFinder <2.1.60 - Arbitrary File Upload
• PoCCVE-2022-26960: elFinder <=2.1.60 - Local File Inclusion
• PoCelfinder-version: elFinder 2.1.58 - Remote Code Execution
• PoCdrupal7-elfinder-rce: Drupal 7 Elfinder - Remote Code Execution
• PoCelFinder-path-traversal: elFinder <=2.1.12 - Local File Inclusion
• elFinder CVE-2021-23394 远程代码执行漏洞
• elFinder PHP Connector CVE-2021-32682远程代码执行漏洞
• Studio-42 elFinder CVE-2022-27115任意文件上传漏洞
• elFinder CVE-2022-26960目录遍历漏洞