Kurdistan Region Statistics Office RCE Vulnerable (Telerik)

2021.09.06

Xale (TR)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

# Exploit Title: Kurdistan Region Statistics Office RCE Vulnerable (Telerik)
# Date: 2021-04-09
# Exploit Author: Xale
# Tested on: Windows 10

----------------------------------------

"""
Site : http://krso.gov.krd/ - http://krso.net/
Vulnerable URL : http://krso.gov.krd/Telerik.Web.UI.WebResource.axd?type=rau - http://krso.net/Telerik.Web.UI.WebResource.axd?type=rau
Exploit : https://github.com/noperator/CVE-2019-18935 | https://labs.bishopfox.com/tech-blog/cve-2019-18935-remote-code-execution-in-telerik-ui

"""

---------------------------------------

See this note in RAW Version

Vote for this issue:

100%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Kurdistan Region Statistics Office RCE Vulnerable (Telerik)

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.