Exploit for CVE-2019-11580

githubexploit · 2020-03-06

Description

This is a remote exploit shell for the vulnerability CVE two thousand nineteen one one five eight zero.

Entry point

Parameterfile_<random> · path

Pathcrowd/admin/uploadplugin.action

Unauthenticated plugin upload endpoint used to install a malicious plugin (RCE).

Affected Atlassian Crowd versions

Atlassian Crowd< 3.0.5, 3.1.6, 3.2.8, 3.3.5, 3.4.4

All known vulnerabilities by product

Crowd

CVSS 9.8 for CVE-2019-11580

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

33%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

95.4%higher than 99.9% of all CVEs

Updated 2026-06-16

CVE Information

CVE-2019-11580

Exploit Details

Modified:2024-08-12 19:58

Last Seen:2025-12-11 16:52

Reporter:shelld3v

Written in:Python

Last commit:2020-04-10

Other exploits for CVE-2019-11580

nmap-scripts

2026-08-27 KitPloitKITPLOIT

CVE-2019-11580

2026-08-26 KitPloitKITPLOIT

CVE-2019-11580

2026-08-25 KitPloitKITPLOIT

Atlassian Crowd pdkinstall Remote Code Execution

2021-08-12 PaulPACKETSTORMRuby

Exploit for CVE-2019-11580

2021-02-24 云野GITEE

Exploit for CVE-2019-11580

2019-07-17 jas502nGITHUB

Atlassian Crowd pdkinstall Unauthenticated Plugin Upload RCE

2019-05-22 Paul, Corben Leo, Grant WillcoxMETASPLOITRuby

Exploit Code

README3 lines

## https://sploitus.com/exploit?id=5777C837-35D8-5EEE-86E4-5A2BAC87AFAB
# CVE-2019-11580
A CVE-2019-11580 shell for exploit vulnerability remotely.

Exploit Code

Share

Share on social media: