Updated CVE-2022-35914 template

[senderend]

Template / PR Information

• Updated this template with ability to detect this vulnerability on hosts in which PHP's exec() function is disabled. These hosts are still exploitable for RCE using a more complex method, see references below for my research and PoC exploit.

• References:

  • https://senderend.medium.com/pg-practice-box-deep-dive-glpi-c3a1cf1520f8
  • https://github.com/allendemoura/CVE-2022-35914

Template Validation

I've validated this template locally?

• YES
• NO

Additional Details

Testing on a vulnerable host from OffSec PG Labs (machine name: GLPI), undetected by current template, detected by this updated template:

Confirmation of vulnerability with PoC referenced above:

[senderend]

removed trailing space, ready for recheck

[GeorginaReeder]

Thanks so much for your contribution @allendemoura , we appreciate it :)

We also have a Discord server, which you’re more than welcome to join. It's a great place to connect with fellow contributors and stay updated with the latest developments!

[pussycat0x]

Hello @allendemoura, thank you so much for sharing this template with the community and contributing to this project 🍻
You can grab some cool PD stickers over here http://nux.gg/stickers 😄