Back to directory
WRITEUP #1382

SSTI leads to RCE on PyroCMS

RCESSTI
bycupc4k3
Program
PyroCMS
Published
Mar 20, 2023
Added to HackDex
Mar 23, 2023
Read Full Writeuphttps://cupc4k3.lol/ssti-leads-to-rce-on-pyrocms-7515be27c811
RELATED WRITEUPS
WPML Multilingual CMS Authenticated Contributor+ Remote Code Execution (RCE) via Twig Server-Side Template Injection (SSTI)
RCESSTI
Chaining Three Bugs to Access All Your ServiceNow Data
RCESSTI
Vulnerabilities in Open Source C2 Frameworks
RCEOS command injection
[2,500$ Bug Bounty Write-Up] Remote Code Execution (RCE) via unclaimed Node package
RCEDependency confusion
Attacking PowerShell CLIXML Deserialization
DeserializationInsecure deserialization

Built with ❤️ by Shubham Rawat