📄 MetInfo CMS 8.1 PHP Code Injection

This Python script is a full remote code execution exploit suite targeting a vulnerability in MetInfo CMS versions 8.1 and below. The flaw resides in the weixin module handling logic, where improperly sanitized input allows PHP code injection via crafted XML and HTTP parameters/headers...

CVE-2022-27336

Seacms v11.6 was discovered to contain a remote code execution RCE vulnerability via the component /admin/weixin.php...