/CVE-2021-41773_CVE-2021-42013

Apache HTTP Server 2.4.49, 2.4.50 - Path Traversal & RCE

Primary LanguageShell

alt text

Apache HTTP Server 2.4.49, 2.4.50 - Path Traversal & RCE

Exploit Author: Lucas Souza https://ls4ss.github.io/
Vendor Homepage: https://apache.org/
Version: 2.4.49, 2.4.50
Tested on: 2.4.49, 2.4.50
CVE : CVE-2021-41773, CVE-2021-42013
Credits: Ash Daulton and the cPanel Security Team

Usage

 ./PoC.sh targets.txt /etc/passwd

 ./PoC.sh targets.txt /bin/sh "id"