pentester.land· Jan 12, 2024· by Naveen Sunkavally🔍 CVE-2023-39143

Writeup for CVE-2023-39143: PaperCut WebDAV Vulnerability

Open Original Article ↗
Target Program: PaperCut
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#WebDAV#Path traversal#RCE#Security code review#CVE-2023-39143

More Writeups Like This

pentester.land

Traccar 5 Remote Code Execution Vulnerabilities

by Naveen Sunkavally
pentester.land

Path Traversal and Code Execution in CSLA.NET (CVE-2024-28698)

by Sam Pizzey
pentester.land

WhatsUp Gold Pre-Auth RCE WriteDataFile Primitive (CVE-2024-4883)

by Sina Kheirkhah (@SinSinology)
pentester.land

WhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive (CVE-2024-4885)

by Sina Kheirkhah (@SinSinology)