RCE#

CVE-2018-9276#

Version: below 18.2.39. From like 2018, Authenticated command injection

Log in -> setup -> Account Settings -> Notifications

Add new notification

Scroll down to Execute program, then do the command injection thing.

Then send a test notification, which will send us our revshell