CVE-2024-44871 PoC — moziloCMS 安全漏洞

Source

https://github.com/vances25/CVE-2024-44871

Associated Vulnerability

Title: moziloCMS 安全漏洞 (CVE-2024-44871)
Description:An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file.

Readme

# MoziloCMS <= 3.0.1 Authenticated RCE

## Description

This script is an exploit tool designed for testing web applications running MoziloCMS. It allows an attacker to use admin logins to upload a PHP web shell via jpg file, rename the uploaded file to php, and send system commands to the target through the php file.

**⚠️ WARNING: This script is for educational purposes only. Use it responsibly and ensure you have proper authorization before testing any system. Unauthorized use is illegal and unethical.**

## How To Run
python3 main.py -u USERNAME -p PASSWORD -t TARGET_URL

ex: python exploit.py -u admin -p hunter2 -t http://example.com

note: DO NOT END URL WITH / and please specify http/https

## References
https://www.exploit-db.com/exploits/52096
https://nvd.nist.gov/vuln/detail/CVE-2024-44871

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →