Simple Remote Code Execution on EJS Web Applications with express-fileupload

• EJS-Exploit

  1 11 0.0 Python

  Remote Code Execution EJS Web Applications using express-fileupload

TLDR with no explaination

• express-fileupload

  2 1,510 7.8 JavaScript

  Simple express file upload middleware that wraps around busboy

This Proof of Concept (POC) is a simple example of RCE. Good for demonstrating RCE to an audience without technical knowledge. I doubt it can be used in the wild for penetration testing or for any malicious purposes. In fact the author of the dependency has a glaring warning of this vulnerability at the top of their github repo

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project