CVE-2023-3578 PoC — Desdev DedeCMS 代码问题漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3578.yaml

Associated Vulnerability

Title:Desdev DedeCMS 代码问题漏洞 (CVE-2023-3578)
Description:Desdev DedeCMS（织梦内容管理系统）是中国卓卓网络（Desdev）公司的一套基于PHP的开源内容管理系统（CMS）。该系统具有内容发布、内容管理、内容编辑和内容检索等功能。 DedeCMS 5.7.109版本存在代码问题漏洞，该漏洞源于对参数rssurl的错误操作导致服务器端请求伪造。

Description

Manipulation of the rssurl parameter in co_do.php leads to server-side request forgery in DedeCMS version 5.7.109.

File Snapshot


 id: CVE-2023-3578

info:
  name: DedeCMS 5.7.109 - Server-Side Request Forgery
  author: ritikchaddh

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!