module

SmarterTools SmarterMail GUID File Upload Vulnerability

Try Surface Command
Back to search
Disclosed
Oct 9, 2025
Created
Jan 22, 2026

Description

This module exploits a pre-auth remote code execution vulnerability in SmarterTools SmarterMail before version 100.0.9413.
The endpoint /api/upload fails to sanitize the contextData POST parameter which can contain JSON data with a
"guid" key that allows directory traversal. By leveraging this vulnerability, an unauthenticated attacker can
upload a malicious ASPX web shell to the server's web root directory, leading to remote code execution.

Authors

Piotr Bazydlo
Sina Kheirkhah
jheysel-r7

Platform

Linux,Unix,Windows

Architectures

cmd

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


    msf > use exploit/multi/http/smartermail_guid_file_upload
    msf exploit(smartermail_guid_file_upload) > show targets
        ...targets...
    msf exploit(smartermail_guid_file_upload) > set TARGET < target-id >
    msf exploit(smartermail_guid_file_upload) > show options
        ...show and set options...
    msf exploit(smartermail_guid_file_upload) > exploit
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.