CVE-2023-35813 PoC — Sitecore 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35813.yaml

Associated Vulnerability

Title:Sitecore 安全漏洞 (CVE-2023-35813)
Description:Sitecore是丹麦Sitecore公司的一套在线营销内容管理系统（CMS）。该系统支持内容编辑、多种语言、多网站部署、数字资产管理等。 Sitecore Experience Manager、Experience Platform 、 Experience Commerce 9.0 到 10.3版本存在安全漏洞。攻击者利用该漏洞可以远程执行代码。

Description

Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.

File Snapshot


 id: CVE-2023-35813

info:
  name: Sitecore - Remote Code Execution
  author: DhiyaneshDk,iamnoooob
 

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!