Description
Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this issue by injecting OS commands inside the vulnerable parameters.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 2
- ZeroShell 3.9.0 - Remote Command Execution EDB-49862 · webapps · May 13, 2021
- ZeroShell 3.9.0 - 'cgi-bin/kerbynet' Remote Root Command Injection (Metasploit) EDB-49096 · webapps · Nov 24, 2020 · verified
GitHub 5 repositories
-
sma11new/PocList ★ 177 · May 22, 2021
漏洞POC、EXP合集，持续更新。Apache Druid-任意文件读取（CVE-2021-36749）、ConfluenceRCE（CVE-2021-26084）、ZeroShell防火墙RCE（CVE-2019-12725）、ApacheSolr任意文件读取、蓝凌OA任意文件读取、phpStudyRCE、ShowDoc任意文件上传、原创先锋后台未授权、Kyan账号密码泄露、TerraMast…
-
hev0x/CVE-2019-12725-Command-Injection ★ 2 · Jun 13, 2021
ZeroShell 3.9.0 Remote Command Injection
-
givemefivw/CVE-2019-12725 ★ 1 · Apr 27, 2021
CVE-2019-12725 ZeroShell 远程命令执行漏洞
-
t0mmy4/CVE-2019-12725-modified-exp ★ 0 · Dec 16, 2024
-
gougou123-hash/CVE-2019-12725 ★ 0 · Aug 10, 2021
ZeroShell命令执行漏洞批量扫描poc+exp
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Zeroshell 3.9.0 - Remote Command Execution http/cves/2019/CVE-2019-12725.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.