Description
BrainyCP 1.0 contains an authenticated remote code execution vulnerability that allows logged-in users to inject arbitrary commands through the crontab configuration interface. Attackers can exploit the crontab endpoint by adding a malicious command that spawns a reverse shell to a specified IP and port.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| brainycp | BrainyCP | 1.0 | — |
References
- ExploitDB-51357 exploit
- Official Product Homepage product
- VulnCheck Advisory: BrainyCP 1.0 Remote Code Execution via Authenticated Crontab Manipulation third-party-advisory