CVE-2024-44871 PoC — moziloCMS 安全漏洞

介绍

# MoziloCMS <= 3.0.1 Authenticated RCE

## Description

This script is an exploit tool designed for testing web applications running MoziloCMS. It allows an attacker to use admin logins to upload a PHP web shell via jpg file, rename the uploaded file to php, and send system commands to the target through the php file.

**⚠️ WARNING: This script is for educational purposes only. Use it responsibly and ensure you have proper authorization before testing any system. Unauthorized use is illegal and unethical.**

## How To Run
python3 main.py -u USERNAME -p PASSWORD -t TARGET_URL

ex: python exploit.py -u admin -p hunter2 -t http://example.com

note: DO NOT END URL WITH / and please specify http/https

## References
https://www.exploit-db.com/exploits/52096
https://nvd.nist.gov/vuln/detail/CVE-2024-44871

文件快照

备注