EasyPHP Webserver 14.1 Path Traversal / Remote Code Execution

# Exploit Title: EasyPHP Webserver 14.1 - Multiple Vulnerabilities (RCE andPath Traversal)# Discovery by: Rafael Pedrero# Discovery Date: 2022-02-06# Vendor Homepage: https://www.easyphp.org/# Software Link : https://www.easyphp.org/# Tested Version: 14.1# Tested on: Windows 7 and 10# Vulnerability Type: Remote Command Execution (RCE)CVSS v3: 9.8CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCWE: CWE-78Vulnerability description: There is an OS Command Injection in EasyPHPWebserver

Related Keywords

Rafael Pedrero ,Webclient Downloadfile ,Software Link ,Exploit Title ,Multiple Vulnerabilities ,Discovery Date ,Vendor Homepage ,Tested Version ,Vulnerability Type ,Remote Command Execution ,Remote Code ,System Net Webclient ,Absolute Path Traversal ,