Timeline for CVE-2017-15580: Getting code execution with upload
Current License: CC BY-SA 4.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 31, 2020 at 14:03 | comment | added | schroeder♦ | Right. But the vulnerability is not about the server running anything... It's only about uploading an exe that gets delivered to someone else, and that someone else runs the payload (the "end user"). You are expecting the server to run the exe, but there is nothing in the PoC that says that happens or is even possible... | |
| Dec 31, 2020 at 12:48 | comment | added | ChocolateOverflow | In my test, I'm not trying to get a reverse shell at all. I'm just trying to get the server to run some code that makes a request to a temporary end-point. | |
| Dec 31, 2020 at 8:48 | history | answered | schroeder♦ | CC BY-SA 4.0 |