CVE-2023-40028

CVE-2023-40028：Ghost 任意文件读取 CVE-2023-40028 的概念验证，这是 Ghost 内容导入功能中的一个经过身份验证的任意文件读取漏洞。一个精心构造的 ZIP 归档会在 content/images 下创建一个符号链接，使脚本能够从 Ghost 主机请求文件。 5.59.1 之前的 Ghost 版本会受到影响。请升级到 5.59.1 或更高版本。 仅在你拥有或获得授权测试的系统上使用此工具。 要求 Python 3 requests Ghost 管理员凭据或有效的 ghost-admin-api-session cookie python3 -m venv...

Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028

Ghost 任意文件读取漏洞利用工具（CVE-2023-40028） 概述 本脚本利用 Ghost CMS 中的一个漏洞（CVE-2023-40028），实现从服务器读取任意文件。通过利用上传 ZIP 文件中的符号链接，攻击者可获得系统上敏感文件的未授权访问。 功能特性 1. 自动登录 Ghost CMS 管理 API。 2. 构造一个包含目标文件符号链接的恶意 ZIP 载荷。 3. 利用 Ghost CMS 的导入功能上传并解压载荷。 4. 获取并显示目标文件的内容。 前提条件 能够访问目标 Ghost CMS 实例（需要登录凭据）。 攻击者系统上安装了 curl、zip 及基本的...

CVE-2023-40028

Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host operating system. Site administrators can...

Exploit for Path Traversal in Ghost

CVE-2023-40028 POC for CVE-2023-40028: Ghost CMS Arbitrary Fil...

CVE-2023-40028

creationtimestamp| type| source ---|---|--- 2025-03-07 10:00:06+00:00| published-proof-of-concept| Telegram/DSUpJzd535KWvozjCvixS0aCLxmEfW4QzhCQOssRq3Zo9k 2025-04-12 15:00:15+00:00| seen| https://bsky.app/profile/0xdf.bsky.social/post/3lmmsdrpgls2z 2025-04-14 23:00:06+00:00|...

Exploit for Path Traversal in Ghost

CVE-2023-40028: Ghost CMS Symlink Exploitation PoC Overv...

Ghost CMS 5.59.1 Arbitrary File Read

Ghost CMS version 5.59.1 proof of concept arbitrary file reading exploit. ============================================================================================================================================= | Title : Ghost CMS v 5.59.1 PHP Code Injection Vulnerability | | Author :...

Exploit for Path Traversal in Ghost

CVE-2023-40028: Ghost CMS Arbitrary File Read Description...

Exploit for Path Traversal in Ghost

CVE-2023-40028 PoC Exploit Symlink Upload Vulnerability in Gho...

Exploit for Path Traversal in Ghost

Proof of Concept PoC for CVE-2023-40028 CVE-2023-40028 is a...

Exploit for Path Traversal in Ghost

Ghost Arbitrary File Read Exploit CVE-2023-40028 Over...

Exploit for Path Traversal in Ghost

CVE-2023-40028 Proof of Concept This repository contains a pr...

CVE-2023-40028 Arbitrary file read via symlinks in Ghost

Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host operating system. Site administrators can...

CVE-2023-40028

CVE-2023-40028 affects Ghost CMS versions prior to 5.59.1. The issue arises in the file upload mechanism where authenticated users can upload symlinks, enabling arbitrary file reads on the host (e.g., reading sensitive files outside the Ghost content directory). The primary documented impact is i...