EasyPHP Webserver 14.1 Path Traversal / Remote Code Executio

# Exploit Title: EasyPHP Webserver 14.1 - Multiple Vulnerabilities (RCE andPath Traversal)# Discovery by: Rafael Pedrero# Discovery Date: 2022-02-06# Vendor Homepage: https://www.easyphp.org/# Software Link : https://www.easyphp.org/# Tested Version: 14.1# Tested on: Windows 7 and 10# Vulnerability Type: Remote Command Execution (RCE)CVSS v3: 9.8CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCWE: CWE-78Vulnerability description: There is an OS Command Injection in EasyPHPWebserver

Related Keywords

Rafael Pedrero , Webclient Downloadfile , Software Link , Exploit Title , Multiple Vulnerabilities , Discovery Date , Vendor Homepage , Tested Version , Vulnerability Type , Remote Command Execution , Remote Code , System Net Webclient , Absolute Path Traversal ,