module

Astium Remote Code Execution

Try Surface Command
Back to search
Disclosed
2013-09-17
Created
2018-05-30

Description

This module exploits vulnerabilities found in Astium astium-confweb-2.1-25399 RPM and
lower. A SQL Injection vulnerability is used to achieve authentication bypass and gain
admin access. From an admin session arbitrary PHP code upload is possible. It is used
to add the final PHP payload to "/usr/local/astium/web/php/config.php" and execute the
"sudo /sbin/service astcfgd reload" command to reload the configuration and achieve
remote root code execution.

Author

xistence xistence@0x90.nl

Platform

PHP

Architectures

php

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


    msf > use exploit/linux/http/astium_sqli_upload
    msf exploit(astium_sqli_upload) > show targets
        ...targets...
    msf exploit(astium_sqli_upload) > set TARGET < target-id >
    msf exploit(astium_sqli_upload) > show options
        ...show and set options...
    msf exploit(astium_sqli_upload) > exploit
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today