CVE-2015-6967 PoC — Nibbleblog 代码注入漏洞

Source

Associated Vulnerability

Description

Nibbleblog 4.0.3 - Arbitrary File Upload (CVE-2015-6967)

Readme

# CVE-2015-6967

Nibbleblog 4.0.3 - Arbitrary File Upload (CVE-2015-6967)

## requirements

- python 3
- `requests`

## usage

```
usage: exploit.py [-h] --url URL --username USERNAME --password PASSWORD --payload PAYLOAD

optional arguments:
  -h, --help            show this help message and exit
  --url URL, -l URL
  --username USERNAME, -u USERNAME
  --password PASSWORD, -p PASSWORD
  --payload PAYLOAD, -x PAYLOAD
```

example:

`python3 exploit.py --url http://10.10.10.75/nibbleblog/ --username admin --password nibbles --payload shell.php`

File Snapshot

 [4.0K]  /data/pocs/325ffee34244b2e18b962178f62f3af142120862
├── [1.9K]  exploit.py
└── [ 551]  README.md

0 directories, 2 files

Remarks