CVE-2023-34965 PoC — SSPanel UIM 安全漏洞

Source

https://github.com/AgentY0/CVE-2023-34965

Associated Vulnerability

Title: SSPanel UIM 安全漏洞 (CVE-2023-34965)
Description:SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information.

Description

SSPanel UIM is a multi-purpose agency service sales management system specially designed for Shadowsocks / V2Ray / Trojan protocols. SSPanel-Uim version before 2023.3 does not restrict access to the /link/ interface,which can lead to a leak of user subscription information.

Readme

# CVE-2023-34965
SSPanel UIM is a multi-purpose agency service sales management system specially designed for Shadowsocks / V2Ray / Trojan protocols. SSPanel-Uim version before 2023.3 does not restrict access to the /link/ interface,which can lead to a leak of user subscription information.

#Detail in：https://github.com/AgentY0/CVE-2023-34965/blob/main/CVE-2023-34965.pdf

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →