CVE-2022-23935 PoC — exiftool 操作系统命令注入漏洞

Source

https://github.com/cowsecurity/CVE-2022-23935

Associated Vulnerability

Title: exiftool 操作系统命令注入漏洞 (CVE-2022-23935)
Description:lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.

Description

CVE-2022-23935 exploit PoC exiftool version 12.37 written in python

Readme

## Introduction

CVE-2022-23935 exploit PoC exiftool version 12.37 

## Installation

```bash

git clone https://github.com/0xFTW/CVE-2022-23935

cd CVE-2022-23935 

chmod +x CVE-2022-23935.py

pip3 install pwntools

```

## Usage

```bash

./CVE-2022-23935 <IP> <PORT>

```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →