CVE-2023-50564

CVE-2023-50564 📌 描述 此漏洞允许 Pluck CMS v4.7.18 中经过认证的管理员上传一个包含 PHP 后门的恶意 ZIP 模块，从而导致远程代码执行 RCE。 ⚙️ 功能特点 使用有效的用户名和密码对目标进行身份验证 自动从提供的 PHP 文件创建 ZIP 压缩包 将模块上传到存在漏洞的 installmodule 端点 触发载荷并显示输出 支持自定义目标、端口、凭据和 shell 路径 🚀 使用方法 root@kitploit: git clone https://github.com/glynzr/CVE-2023-50564.git cd...

CVE-2023-41425

CVE-2023-41425 描述 WonderCMS 版本 3.2.0 至 3.4.2 中存在一个跨站脚本漏洞，允许远程攻击者通过上传特制脚本到 installModule 组件来执行任意代码。 这是 prodigiousMind 原始漏洞利用的修改版本，扩展了漏洞利用功能，使其能够在本地提供完整的漏洞利用服务，无需依赖外部网络连接。 当你在海上迷失，且发现你的自行车出了问题的时候，它很有用…… 注意：仓库中留下的 xss.js 仅用于演示目的，脚本运行时将用你的配置覆盖它。 用法 root@kitploit: usage: exploit.py -h -u URL -lh LHOST...

CVE-2023-41425

Wonder CMS RCE | | 描述 : XSS 到 RCE，Wonder CMS 3.2.0 evil/evil.php EOF zip -r evil.zip evil/ 将安装新主题的 JS 载荷 cat form+action=" EOF 启动新 Web 服务器以提供载荷 sudo python3 -m http.server $LPORTWEB & | | 将 RCE XSS 发送给管理员后，我们会得到以下 HTTP 调用 .. code-block:: 10.129.252.14 - - 11/Aug/2024 18:42:26 "GET /xssrce.js...

CVE-2023-50564

CVE-2023-50564 - Pluck CMS v4.7.18 漏洞利用工具 概述 该脚本利用 Pluck CMS v4.7.18 中的已验证任意文件上传漏洞（CVE-2023-50564）。通过利用此漏洞，已通过身份验证的攻击者可以上传恶意 PHP 文件，从而执行任意代码（此处为反向 Shell）。 漏洞详情 CVE ID ：CVE-2023-50564 受影响版本 ：Pluck CMS v4.7.18 类型 ：已验证的任意文件上传 影响 ：远程代码执行（RCE） 该漏洞存在于 /admin.php?action=installmodule...

CVE-2023-41425

CVE-2023-41425 CVE-2023-41425 是 Wonder CMS 中的一个反射型 XSS 漏洞，可进一步通过 installModule 组件利用恶意脚本执行任意代码。 使用方法 针对目标的 loginURL 运行漏洞利用程序，指定用于托管恶意 .js 文件的 Web 服务器的 IP 和端口： root@kitploit: $ python3 exploit.py --url http://sea.htb/loginURL --xip 10.10.16.25 --xport 8888 + 创建 PHP Web Shell + 写入 malicious.js + XSS...

CVE-2023-41425

WonderCMS v3.2.0 至 v3.4.2 版本的远程代码执行漏洞 WonderCMS v3.2.0 至 v3.4.2 版本存在 XSS 漏洞，恶意攻击者可通过向 installModule 上传组件实现远程代码执行（无需知道密码）。对应 CVE-2023-41425。 功能特性： 自动利用 CVE-2023-41425 轻松指定下载 zip 文件的远程主机 使用方法/示例 指定下载 main.zip 文件的远程主机 root@kitploit: ./exploit.py -u http://example.com/loginURL -i 10.10.14.110 -p 4321...

CVE-2023-41425-wonderCMS_RCE

CVE-2023-41425-wonderCMSRCE Wonder CMS v.3.2.0 至 v.3.4.2 版本中存在跨站脚本（XSS）漏洞，允许远程攻击者通过上传到 installModule 组件的恶意脚本执行任意代码。 仅用于教育目的 需要知道 loginURL、拥有管理员访问权限，或能够诱使管理员点击 XSS 链接。 1. 克隆仓库 root@kitploit: git clone https://github.com/thefizzyfish/CVE-2023-41425-wonderCMSRCE.git 2. 运行 root@kitploit: usage:...

CVE-2023-41425

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component...

CVE-2023-26128

All versions of the package keep-module-latest are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the installModule function. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have...

Exploit for Cross-site Scripting in Wondercms

CVE-2023-41425-wonderCMSRCE Cross Site Scripting vulnerabilit...

The vulnerability of the installModule component in the Wonder CMS content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the installModule component in the Wonder CMS content management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

CVE-2023-41425

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component...

WonderCMS Security Breach

WonderCMS is an open source PHP-based content management system CMS. A security vulnerability exists in WonderCMS versions v.3.2.0 through v.3.4.2. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted scripts uploaded to the installModule component...

CVE-2023-41425

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component...

CVE-2023-41425

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component...

CVE-2023-41425

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component...

PT-2023-6828

Name of the Vulnerable Software and Affected Versions Wonder CMS versions 3.2.0 through 3.4.2 Description The issue is related to a Cross Site Scripting vulnerability that allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. This...

Command Injection

keep-module-latest is vulnerable to command injection. The vulnerability exists in installModule function of index.js due to improper input sanitization, which allows an attacker to inject and execute malicious commands within the target environment...

keep-module-latest vulnerable to Command Injection due to missing input sanitization

All versions of the package keep-module-latest are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the installModule function. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have...

GHSA-WXRX-PC44-RCGC keep-module-latest vulnerable to Command Injection due to missing input sanitization

All versions of the package keep-module-latest are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the installModule function. Note: To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have...