CVE-2019-6447 PoC — ES File Explorer File Manager application for Android 访问控制错误漏洞

Source

https://github.com/0xwh1pl4sh/CVE-2019-6447

Associated Vulnerability

Title:ES File Explorer File Manager application for Android 访问控制错误漏洞 (CVE-2019-6447)
Description:The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after the ES application has been launched once, and responds to unauthenticated application/json data over HTTP.

Readme

#️⃣ CVE-2019-6447
🖥️ -k4u5h41-

### ES File Explorer 4.1.9.7.4 - Arbitrary File Read

![image](https://user-images.githubusercontent.com/66146701/125127155-97bff780-e0a8-11eb-80dc-1a6778f19dd4.png)

![image](https://user-images.githubusercontent.com/66146701/125159748-c7611500-e125-11eb-99db-1e2d55dc2f98.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →