/grav-mal-zip

Malicious Zip to achieve RCE on Grav CMS if authenticated.

Tested on Grav CMS v1.6.24 - Admin v1.9.14

Usage:

  1. Download ZIP
  2. Log in to the CMS
  3. Go to themes
  4. Upload new theme
  5. Add "cmd" get parameter for command execution.

http://localhost/grav/grav-admin/admin/themes?cmd=whoami