{"uuid": "26bd51c7-22fd-49f9-bcb8-9d34b38cb1d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45428", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/53064", "content": "Exploit Collector\nTLR-2005KSH Arbitrary File Upload\n\nhttps://3.bp.blogspot.com/-YTa6qox_ltk/WWlvNeWMUbI/AAAAAAAAIMc/0l9a_Kr-MFozVC5jeSwhLNgVZ9cZuXXlQCLcBGAs/s1600/h22.png \nTLR-2005KSH suffers from an arbitrary file upload vulnerability.\n\nSHA-256 | f7ccc88ff2a331dfcd6837d903e8a8b9647905703b086149bc856a1f4d52c2d9\n\nDownload\n# Exploit Title: TLR-2005KSH - Arbitrary File Upload\n# Date: 2022-05-11\n# Shodan Dork: title:\"Login to TLR-2021\"\n# Exploit Author: Ahmed Alroky\n# Author Company : Aiactive\n# Version: 1.0.0\n# Vendor home page : http://telesquare.co.kr/\n# Authentication Required: No\n# Tested on: Windows\n# CVE: CVE-2021-45428\n\n# Vulnerability Description\n# Due to the Via WebDAV (Web Distributed Authoring and Versioning),\n# on the remote server,telesquare TLR-2021 allows unauthorized users to upload\n# any file(e.g. asp, aspx, cfm, html, jhtml, jsp, shtml) which causes\n# remote code execution as well.\n# Due to the WebDAV, it is possible to upload the arbitrary\n# file utilizing the PUT method.\n\n# Proof-of-Concept\n# Request\nPUT /l6f3jd6cbf.txt HTTP/1.1\nHost: 223.62.114.233:8081\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T22:00:05.223065Z"}