Sploitus

Exploit for Path Traversal in Citrix Application Delivery Controller Firmware

CVE-2019-19781

gitee · 2025-07-06

Exploit Code

MARKDOWN18 lines
## https://sploitus.com/exploit?id=8B623001-1734-532D-BEB6-1E5123A03BC3
# CVE-2019-19781
Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]

Usage : bash CVE-2019-19781.sh IP_OF_VULNURABLE_HOST COMMAND_TO_EXECUTE 
  
  e.g : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd'
  
  ![CVE-2019-19781.sh demo](https://github.com/projectzeroindia/CVE-2019-19781/raw/master/CVE-2019-19781.PNG)


# Reference :

https://support.citrix.com/article/CTX267027

https://nvd.nist.gov/vuln/detail/CVE-2019-19781

https://vulners.com/cve/CVE-2019-19781