Proving Grounds Writeups

110 writeups 44× Easy 4× Medium 8× Hard

Difficulty

Tag

Access

Sort

Tag: pluxml Clear all

Showing 1–1 of 1

Intermediate Linux

Plum Writeup - Proving Grounds

Intermediate Linux box running PluXML 5.8.7 with default admin credentials, exploited through the CVE-2022-25018 static-page PHP injection for a www-data shell, then escalated to root via a plaintext password left in local mail.

rce default-credentials information-disclosure pluxml +1

The Husky Hacker • Oct 8, 2026 • 2 min read

Other platforms

HackTheBox 92 TryHackMe 10 All writeups