POC-exploit-for-Dolibarr

Dolibarr example: python3 exploit.py http://example.com login password 127.0.0.1 9001 ---Reverse Shell Exploit for Dolibarr = 17.0.0 CVE-2023-30253--- positional arguments: hostname Target hostname username Username of Dolibarr ERP/CRM password Password of Dolibarr ERP/CRM lhost Listening host fo...

CVE-2022-29359

학교 동아리 지원 시스템 문제: 인증되지 않은 저장형 크로스 사이트 스크립팅에서 HTML 인젝션, RCE까지 작성자: Zak Clifford 날짜: 12.04.2022 공급업체: https://www.sourcecodester.com/php/15266/school-club-application-system-phpoop-free-source-code.html 소프트웨어: https://www.sourcecodester.com/sites/default/files/download/oretnom23/scas0.zip 참조:...

CVE-2024-7094

CVE-2024-7094 CVE-2024-7094 취약점 확인 도구 취약점 유형: PHP Code Injection...

CVE-2025-62429

CVE-2025-62429 PoC - clipbucket RCE updatelaunch.php의 PHP 코드 삽입을 통한 RCE 개념 증명 공개: 제가 GHSA-3h9c-7j8r-xc3v를 통해 처음 보고했습니다. ⚠️ 승인된 침투 테스트/연구 목적으로만 사용하세요. 취약점 정보 필드| 값 ---|--- CVE ID| CVE-2025-62429 심각도| 🔴 높음 CVSS 점수| 7.2 CVSS 벡터| CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CWE| CWE-78: OS 명령 삽입,...

CVE-2023-30253-exploit

CVE-2023-30253 — Dolibarr ERP/CRM 17.0.0 원격 코드 실행 PHP 코드 삽입 익스플로잇으로 Dolibarr ERP/CRM v17.0.0 에서 Website/CMS 모듈을 통해 www-data 사용자로 리버스 셸 을 획득할 수 있습니다. ⚠️ 교육 목적 및 승인된 감사에만 사용하세요. 📑 목차 CVE-2023-30253이란? 취약점 작동 방식 영향 이 익스플로잇의 기능 요구 사항 설치 사용법 실습 예제 익스플로잇 단계별 설명 완화 조치 참고 자료 🔍 CVE-2023-30253이란?...

pocs

minervais.com.phpMyAdminRCE.sh phpMyAdmin の '/scripts/setup.php' に対する PHP コードインジェクション RCE の POC。これは CVE-2009-1151 用として最初に公開されたエクスプロイトです。 構文 $ ./phpMyAdminRCE.sh usage: ./phpMyAdminRCE.sh i.e.: ./phpMyAdminRCE.sh http://target.tld/phpMyAdmin/ デモ $ ./phpMyAdminRCE.sh...

CVE-2024-43363

CVE-2024-43363 CVE-2024-43363 익스플로잇 스크립트 이 Python 스크립트는 Cacti 인스턴스가 CVE-2024-43363, 즉 로그 중독으로 인해 발생하는 원격 코드 실행RCE 취약점에 취약한지 테스트하도록 설계되었습니다. 취약점 작동 방식: 로그 중독: 공격자가 장치 이름에 PHP 코드를 주입하며, Cacti는 이를 적절한 살균 처리 없이 로그에 기록합니다. 실행: 웹 URL을 통해 로그에 접근하면 주입된 코드가 실행되어, 공격자가 서버에서 명령을 실행할 수 있게 됩니다. 스크립트 작동 방식: 버전...

Exploit-for-Dolibarr-17.0.0-CVE-2023-30253

Dolibarr example: python3 exploit.py http://example.com login password 127.0.0.1 9001 ---Reverse Shell Exploit for Dolibarr = 17.0.0 CVE-2023-30253--- positional arguments: hostname Target hostname username Username of Dolibarr ERP/CRM password Password of Dolibarr ERP/CRM lhost Listening host fo...

CVE-2024-25600

Exploit de CVE-2024-25600 - WordPress Bricks Builder Ejecución Remota de Código RCE Un script de exploit para CVE-2024-25600 , una vulnerabilidad crítica de Ejecución Remota de Código RCE sin autenticación en el plugin Bricks Builder para WordPress. Esta herramienta detecta la falla, extrae el...

CVE-2026-55634 Pimcore: Remote Code Execution via DataObject Class-Definition Field Name

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoint /pimcore-studio/api/class/definition/configuration-view/detail/id/import accepts a DataObject field name that is emitted without an identifier allowlist b...

WordPress Create Block Theme plugin < 2.10.0 - Admin+ PHP Code Injection via Pattern Save (Multisite) vulnerability

Admin+ PHP Code Injection via Pattern Save Multisite vulnerability discovered by Pavan Saxena Rootkid in WordPress Plugin Create Block Theme versions 2.10.0...

CVE-2026-59989 Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI lead to RCE)

Phalcon is a high-performance, full-stack PHP framework. In 5.15.0 and earlier, resolveFilter in phalcon/Mvc/View/Engine/Volt/Compiler.zep builds the join filter by inserting the raw separator and array token values into generated PHP without passing them through expression. An attacker who can...

CVE-2026-67364

Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms 2.4.3.2 - The form's optional custom-PHP post-submission handler is executed via eval. The URL parameter = X shortcode is substituted with the raw, unescaped value of a query parameter, letting an unauthenticated attack...

EUVD-2026-62397

Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms 2.4.3.2 - CWE-94 / CWE-95 | CVSS 3.1: 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H The form's optional custom-PHP post-submission handler is executed via eval. The URL parameter = X shortcode is substituted with the...

CVE-2026-67364 Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2

Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms 2.4.3.2 - The form's optional custom-PHP post-submission handler is executed via eval. The URL parameter = X shortcode is substituted with the raw, unescaped value of a query parameter, letting an unauthenticated attack...

CVE-2026-67364

Balbooa Forms for Joomla (versions

CVE-2026-67364 Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2

Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms 2.4.3.2 - The form's optional custom-PHP post-submission handler is executed via eval. The URL parameter = X shortcode is substituted with the raw, unescaped value of a query parameter, letting an unauthenticated attack...

PT-2026-78353

Name of the Vulnerable Software and Affected Versions Balbooa Forms versions prior to 2.4.3.2 Description An unauthenticated attacker can perform PHP code injection due to the use of the eval function in the optional custom-PHP post-submission handler. The URL parameter = X shortcode is replaced...

CVE-2026-67364: Improper Control of Generation of Code

Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms 2.4.3.2 - The form's optional custom-PHP post-submission handler is executed via eval. The URL parameter = X shortcode is substituted with the raw, unescaped value of a query parameter, letting an unauthenticated attack...

CVE-2026-52608

An incorrect access control vulnerability in reportico-web = 8.1.0 allows an unauthenticated attacker to inject arbitrary php code into the PreExecuteCode attribute of any report regardless of the safemode setting leading to remote code execution...