cve-2023-2523-and-cve-2023-2648

cve-2023-2523 Nota: lo script carica un file phpinfo Utilizzo: I risultati vengono salvati automaticamente nel file result.txt Immagine POC manuale: root@kitploit: POST /E-mobile/App/Ajax/ajax.php?action=mobileuploadsave HTTP/1.1 Host: your-ip Content-Length: 352 Cache-Control: max-age=0...

CVE-2023-2523

CVE-2023-2523 (Weaver E-Office 9.5) A remote unrestricted file upload vulnerability exists in Weaver E-Office 9.5 via the endpoint App/Ajax/ajax.php?action=mobile_upload_save, where the upload_quwan parameter enables uploading arbitrary files. The issue is exploitable remotely and has been public...