CVE-2023-46818 PoC — ISPConfig 安全漏洞

Source

Associated Vulnerability

Description

This is my own exploit for CVE-2023-46818 happy hacking!

Readme

# CVE-2023-46818-Exploit
This is my own exploit for CVE-2023-46818 happy hacking!

This exploit automates the attack described in CVE-2023-46818 by taking advantage of a PHP code injection vulnerability in ISPConfig version 3.2.11 and earlier. It logs into the ISPConfig panel using valid credentials, targets the vulnerable language_edit.php file, and abuses the records[\] form field to inject malicious PHP code. This payload writes a sh.php file on the server, which functions as a lightweight web shell. Once deployed, it launches an interactive shell where the user can type system commands, which the PHP script executes remotely and returns the output wrapped between ____ markers for easy parsing.

Please, feel free to send PR to improve if you considere it, happy hacking! 


@blindma1den

File Snapshot

 [4.0K]  /data/pocs/52cac26a02d0ae019103c6a30403fedf425ea02b
├── [3.1K]  exploit.py
└── [ 800]  README.md

0 directories, 2 files

Remarks