Exploit for CVE-2021-3129

gitee · 2021-09-17

Description

Exploit module for CVE-2021-3129 targeting Laravel remote code execution via the web interface.

Entry point

Parametersolution · request body

Path/_ignition/execute-solution

Unauthenticated remote code execution via Ignition execute-solution endpoint (CVE-2021-3129).

Affected Facade Ignition versions

Facade Ignition< 2.5.2

All known vulnerabilities by product

Ignition Laravel

CVSS 9.8 for CVE-2021-3129

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

84%confidence this exploit runs

Based on 50 file(s) in the source

EPSS Score

99.9%higher than 100.0% of all CVEs

Updated 2026-06-16

CVE Information

Exploit Details

Modified:2021-09-17 12:51

Last Seen:2025-09-11 05:04

Reporter:sh3llsas

Tags

laravel frameworkremote executionweb interfacevulnerable versionexploit module

Other exploits for CVE-2021-3129

Exploit for CVE-2021-3129

2026-08-07 GiangdurianGITHUB

Exploit for CVE-2021-3129

2026-02-12 Nullsecur1tyGITHUB

Exploit for CVE-2021-3129

2026-01-30 crypt0lithGITHUB

Exploit for CVE-2021-3129

2024-09-29 0x0d3adGITHUB

Exploit for CVE-2021-3129

2024-05-19 cc3305GITHUB

Exploit for CVE-2021-3129

2024-01-15 AxiankeGITHUB

Exploit for CVE-2021-3129

2023-10-22 banyaksepuhGITHUB

Exploit for CVE-2021-3129

2023-10-22 banyaksepuhGITHUB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=F4C4F2A8-0B8F-5BF6-9407-ADBD69BA930C
It is an exploit module for CVE-2021-3129. The target product/service is Laravel, a PHP web framework. The vulnerability class/vector is a remote code execution (RCE) vulnerability. The probable entry point is the Laravel application itself, likely through a web interface. Not specified. Preconditions include a vulnerable version of Laravel. Expected impact is remote code execution.