high7.2Public exploit code
CVE-2019-10863
A command injection vulnerability exists in TeemIp versions before 2.4.0.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TeemIp IPAM < 2.4.0 - 'new_config' Command Injection (Metasploit)2019-04-03 · remote · php
Impact
A command injection vulnerability exists in TeemIp versions before 2.4.0. The new_config parameter of exec.php allows one to create a new PHP file with the exception of config information. The malicious PHP code sent is executed instantaneously and is not saved on the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Combodo | Teemip | before 2.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://pentest.com.tr/exploits/TeemIp-IPAM-2-4-0-new-config-Command-Injection-Metasploit.html
- https://www.exploit-db.com/exploits/46641
- https://www.exploit-db.com/exploits/46641/
- https://pentest.com.tr/exploits/TeemIp-IPAM-2-4-0-new-config-Command-Injection-Metasploit.html
- https://www.exploit-db.com/exploits/46641
- https://www.exploit-db.com/exploits/46641/