An exploitation of a CVE vulnerability that has no prior exploit
publishScreenshots from the blog posts
Summary
A Server-Side Template Injection (SSTI) vulnerability exists in in Mblog Blog system v.3.5.0, allowing an attacker to execute arbitrary code by uploading a malicious theme. This post unveils an automated exploit to get RCE on the underlying server where the `mblog` blogging system (version 3.5.0) is running!
general
Description
Tags
Comments (0)