Exploit for Improper Input Validation in Vmware View Planner

githubexploit · 2021-03-05

Description

VMware View Planner Unrestricted File Upload Vulnerability Exploit with RCE

Affected Vmware View Planner versions

Vmware View Planner< 4.6

All known vulnerabilities by product

Vmware View Planner

CVSS 9.8 for CVE-2021-21978

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

99.0%higher than 99.9% of all CVEs

Updated 2026-07-04

Exploit Details

Modified:2024-08-12 20:10

Last Seen:2025-08-31 20:54

Reporter:me1ons

Written in:Python

Last commit:2021-03-05

Tags

vmware view plannerunrestricted uploadfile typeexploitrceCVE-2021-21978vmwareview planner

Other exploits for CVE-2021-21978

2026-08-29 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

VMware View Planner 4.6 Remote Code Execution

2021-03-19 wvuPACKETSTORMRuby

VMware View Planner 4.6 Remote Code Execution Exploit

2021-03-19 metasploitZDTRuby

Exploit for Server-Side Request Forgery in Microsoft

2021-03-09 h4x0r-dzGITHUB

Exploit for Server-Side Request Forgery in Microsoft

2021-03-08 hackerxj007GITHUB

Exploit for Improper Input Validation in Vmware View_Planner

2021-03-05 skytinaGITHUB

Exploit Code

README9 lines

## https://sploitus.com/exploit?id=0DF255CC-57A4-520A-B262-852C932A5B1A
# CVE-2021-21978
CVE-2021-21978 EXP

# VMware View Planner RCE CVE-2021-21978

### 反弹shell
![image](https://raw.githubusercontent.com/me1ons/CVE-2021-21978/main/exp.png)
![image](https://raw.githubusercontent.com/me1ons/CVE-2021-21978/main/shell.png)