CVE-2024-9441 PoC — Linear eMerge e3-Series Forgot Password Command Injection

Source

https://github.com/p33d/CVE-2024-9441

Associated Vulnerability

Title:Linear eMerge e3-Series Forgot Password Command Injection (CVE-2024-9441)
Description:The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary OS commands via the login_id parameter when invoking the forgot_password functionality over HTTP.

Readme

# CVE-2024-9441
Description of the Vulnerability:

This code exploits a Remote Code Execution (RCE) vulnerability that occurs due to improper input sanitization in a PHP-based web application. The specific weakness is in the "forgot password" functionality (index.php?c=user&m=forgot_password), where user input is not properly sanitized, allowing attackers to inject arbitrary PHP code into the server.

This script exploits a vulnerability in a PHP-based application to upload a malicious PHP script to the server and execute system commands via HTTP requests.
Steps to Use:


python exploit.py "/bin/ls -al /var/www/html"

If the exploit succeeds, you should see the directory contents in the terminal output.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →