DolibabyPhp

DolibabyPhp An authenticated RCE exploit for Dolibarr ERP/CRM CVE-2023-30253. Installation You can either install the package from the PyPi repository with pip or git clone the source directly from GitHub. pip install dolibabyphp Usage Usage: dolibabyphp OPTIONS TARGETURL USERNAME PASSWORD COMMAN...

Dolibarr-17.0.0-Exploit-CVE-2023-30253

Readme.md CVE-2023-30253 CVE-2023-30253는 Dolibarr 소프트웨어의 보안 결함으로, 인증된 사용자가 주입된 데이터에서 대문자 변조 기술을 활용하여 원격 코드를 실행할 수 있게 합니다. 영향 이 취약점은 악의적인 공격자에 의한 무단 원격 코드 실행으로 이어질 수 있으며, 영향을 받는 시스템의 보안과 무결성에 심각한 위협을 가합니다. 이 취약점은 Dolibarr 17.0.1에서 수정되었습니다. 참고...

CVE-2023-30253-Exploit

CVE-2023-30253 Exploit Dolibarr vulnerable to remote code execution via uppercase manipulation Affected version 17.0.1 Usage: pip3 install -r requirements.txt python3 CVE-2023-30253.py...

POC-exploit-for-Dolibarr

Dolibarr example: python3 exploit.py http://example.com login password 127.0.0.1 9001 ---Reverse Shell Exploit for Dolibarr = 17.0.0 CVE-2023-30253--- positional arguments: hostname Target hostname username Username of Dolibarr ERP/CRM password Password of Dolibarr ERP/CRM lhost Listening host fo...

Exploit-for-Dolibarr-17.0.0-CVE-2023-30253

Dolibarr example: python3 exploit.py http://example.com login password 127.0.0.1 9001 ---Reverse Shell Exploit for Dolibarr = 17.0.0 CVE-2023-30253--- positional arguments: hostname Target hostname username Username of Dolibarr ERP/CRM password Password of Dolibarr ERP/CRM lhost Listening host fo...

Exploit for OS Command Injection in Dolibarr Dolibarr_Erp\/Crm

CVE-2023-3025...

Exploit for OS Command Injection in Dolibarr Dolibarr_Erp\/Crm

PoC exploit for CVE-2023-30253, an authenticated remote command...

Exploit for OS Command Injection in Dolibarr Dolibarr_Erp\/Crm

CVE-2023-30253 CVE-2023-30253 PoC Description This is my Po...

Exploit for OS Command Injection in Dolibarr Dolibarr_Erp\/Crm

POC exploit for Dolibarr example: python3 exploit.py http...

Exploit for OS Command Injection in Dolibarr Dolibarr_Erp\/Crm

POC exploit for Dolibarr example: python3 exploit.py http...

Exploit for OS Command Injection in Dolibarr Dolibarr_Erp\/Crm

CVE-2023-30253 Exploit Dolibarr vuln...

Exploit for OS Command Injection in Dolibarr Dolibarr_Erp\/Crm

CVE-2023-30253 Description Dolibarr before 17.0.1 al...

CVE-2023-30253

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data...

Dolibarr ERP/CRM Authenticated Code Injection

Dolibarr ERP/CRM before 17.0.1 allows remote code execution by an authenticated user who has access to the Website module. The application filters lowercase use exploit/unix/http/dolibarr/cmsrcecve202330253 msf undefinedcmsrcecve202330253 show actions ...actions... msf undefinedcmsrcecve202330253...

CVE-2023-30253

CVE-2023-30253 affects Dolibarr ERP/CRM versions older than 17.0.1, where an authenticated user can trigger remote code execution via an uppercase PHP tag manipulation (<?PHP vs