Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2022-39952

Description

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP request.

POC

Reference

No PoCs from references.

Github

- https://github.com/0xMarcio/cve

- https://github.com/1f3lse/taiE

- https://github.com/ARPSyndicate/cvemon

- https://github.com/ARPSyndicate/kenzer-templates

- https://github.com/Andromeda254/cve

- https://github.com/CVEDB/PoC-List

- https://github.com/CVEDB/awesome-cve-repo

- https://github.com/CVEDB/top

- https://github.com/Chocapikk/CVE-2022-39952

- https://github.com/GhostTroops/TOP

- https://github.com/H4lo/awesome-IoT-security-article

- https://github.com/Mr-xn/Penetration_Testing_POC

- https://github.com/Threekiii/CVE

- https://github.com/XRSec/AWVS-Update

- https://github.com/aneasystone/github-trending

- https://github.com/dkstar11q/CVE-2022-39952-better

- https://github.com/hackingyseguridad/nmap

- https://github.com/hktalent/TOP

- https://github.com/horizon3ai/CVE-2022-39952

- https://github.com/karimhabush/cyberowl

- https://github.com/lions2012/Penetration_Testing_POC

- https://github.com/nomi-sec/PoC-in-GitHub

- https://github.com/shiyeshu/CVE-2022-39952_webshell

- https://github.com/tanjiti/sec_profile