- rce in
index.vuln.js
line14
const Vulnerability1 = (req, res) => {
exec(
'gzip ' + req.query.file_path,
function (err, data) {
console.log('err: ', err)
console.log('data: ', data);
});
res.send('Hello World!')
}
- rce in
index.vuln.js
line24
const Vulnerability2 = (req, res) => {
spawn(`${req.query.input}`,
function (err, data) {
console.log('err: ', err)
console.log('data: ', data);
});
res.send('Hello World!')
}