CVE-2023-33568 PoC — Dolibarr 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33568.yaml

Associated Vulnerability

Title:Dolibarr 安全漏洞 (CVE-2023-33568)
Description:Dolibarr是一个应用软件。一个现代软件包，可帮助管理您组织的活动。 Dolibarr v16.0.0版本至v16.0.5版本存在安全漏洞，该漏洞源于允许未经身份验证的攻击者执行数据库转储并访问公司的整个客户文件、潜在客户、供应商和员工信息。

Description

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists.

File Snapshot


 id: CVE-2023-33568

info:
  name: Dolibarr Unauthenticated Contacts Database Theft
  author: Dhiyane

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!