• info
• discussion
• exploit
• solution
• references

Yarssr GUI.PM Remote Code Injection Vulnerability

An attacker must entice an unsuspecting victim into subscribing to a malicious RSS feed.

The following exploit code is available:

• /data/vulnerabilities/exploits/26273.rss