CVE-2023-40028

CVE-2023-40028: Ghost CMS 任意ファイル読み取り 説明 このProof-of-Concept（POC）は、CVE-2023-40028を悪用してGhost CMSでファイル読み取りアクセスを実現するために使用できます。...

Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028

Ghost 任意文件读取漏洞利用工具（CVE-2023-40028） 概述 本脚本利用 Ghost CMS 中的一个漏洞（CVE-2023-40028），实现从服务器读取任意文件。通过利用上传 ZIP 文件中的符号链接，攻击者可获得系统上敏感文件的未授权访问。 功能特性 1. 自动登录 Ghost CMS 管理 API。 2. 构造一个包含目标文件符号链接的恶意 ZIP 载荷。 3. 利用 Ghost CMS 的导入功能上传并解压载荷。 4. 获取并显示目标文件的内容。 前提条件 能够访问目标 Ghost CMS 实例（需要登录凭据）。 攻击者系统上安装了 curl、zip 及基本的...

CVE-2023-40028

Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host operating system. Site administrators can...

Exploit for Path Traversal in Ghost

CVE-2023-40028 POC for CVE-2023-40028: Ghost CMS Arbitrary Fil...

CVE-2023-40028

creationtimestamp| type| source ---|---|--- 2025-03-07 10:00:06+00:00| published-proof-of-concept| Telegram/DSUpJzd535KWvozjCvixS0aCLxmEfW4QzhCQOssRq3Zo9k 2025-04-12 15:00:15+00:00| seen| https://bsky.app/profile/0xdf.bsky.social/post/3lmmsdrpgls2z 2025-04-14 23:00:06+00:00|...

Exploit for Path Traversal in Ghost

CVE-2023-40028: Ghost CMS Symlink Exploitation PoC Overv...

Ghost CMS 5.59.1 Arbitrary File Read

Ghost CMS version 5.59.1 proof of concept arbitrary file reading exploit. ============================================================================================================================================= | Title : Ghost CMS v 5.59.1 PHP Code Injection Vulnerability | | Author :...

Exploit for Path Traversal in Ghost

CVE-2023-40028: Ghost CMS Arbitrary File Read Description...

Exploit for Path Traversal in Ghost

CVE-2023-40028 PoC Exploit Symlink Upload Vulnerability in Gho...

Exploit for Path Traversal in Ghost

Proof of Concept PoC for CVE-2023-40028 CVE-2023-40028 is a...

Exploit for Path Traversal in Ghost

Ghost Arbitrary File Read Exploit CVE-2023-40028 Over...

Exploit for Path Traversal in Ghost

CVE-2023-40028 Proof of Concept This repository contains a pr...

CVE-2023-40028 Arbitrary file read via symlinks in Ghost

Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host operating system. Site administrators can...

CVE-2023-40028

CVE-2023-40028 affects Ghost CMS versions prior to 5.59.1. The issue arises in the file upload mechanism where authenticated users can upload symlinks, enabling arbitrary file reads on the host (e.g., reading sensitive files outside the Ghost content directory). The primary documented impact is i...