Atom CMS CVE-2022-25487 远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-25487
• https://www.cve.org/CVERecord?id=CVE-2022-25487
• https://www.sentinelone.com/vulnerability-database/cve-2022-25487/
• https://www.exploit-db.com/exploits/50840
• https://blog.securelayer7.net/remote-code-execution-vulnerability-in-atom-cms/
• https://pentest-tools.com/vulnerabilities-exploits/atom-cms-v20-remote-code-execution_2493
• https://avd.aliyun.com/detail?id=AVD-2022-25487
• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25487.yaml
• https://github.com/thedigicraft/Atom.CMS/issues/256
• https://github.com/shikari00007/Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated-POC

Related Vulnerabilities

• PoCCVE-2022-24223: Atom CMS v2.0 - SQL Injection
• PoCCVE-2022-25487: Atom CMS v2.0 - Remote Code Execution
• PoCCVE-2022-25488: Atom CMS v2.0 - SQL Injection
• PoCCVE-2022-25489: Atom CMS v2.0 - Cross-Site Scripting
• PoCCVE-2022-28032: Atom CMS v2.0 - SQL Injection
• PoCCVE-2022-28033: Atom.CMS 2.0 - SQL Injection
• Atom CMS avatar.php SQL注入漏洞
• Atom CMS 2.0 SQL注入漏洞