Skip to main content
ExploitPublished

Horilla v1.3 · RCE

Source Exploit-DB RSS Feed

0
Severity
Critical

Rated by Threat Radar

Data as of 22 Apr 2026, 07:07 UTC

What to do

AI-suggested

Until an official fix is available, users should monitor vendor communications and consider restricting access to vulnerable instances where possible.

Description

Horilla v1.3 - RCE

Indicators of compromise

Exploit source code

Exploit code for Horilla v1.3 - RCE5,374 characters
# Exploit Title:  Horilla v1.3 - RCE
# Date: 2025-05-29
# Exploit Author: Raghad Abdallah Al-syouf
# Version: <= 1.3
# Tested on: Ubuntu / Docker
# CVE: CVE-2025-48868


Description:
This script exploits the authenticated RCE vulnerability CVE-2025-48868.
It logs into the target web app, creates a project, and sends payloads
to achieve a reverse shell connection to a listener **started manually** by the user.

Usage:
    python3 CVE_2025_48868.py --url http[s]://target:port --user username --pas…

References

Community reviews

Loading reviews…