Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-40871 PoC — Dolibarr ERP/CRM 代码注入漏洞

Source
https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/Dolibarr%20edit.php%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2022-40871.md
Associated Vulnerability
Title:Dolibarr ERP/CRM 代码注入漏洞 (CVE-2022-40871)
Description:Dolibarr ERP/CRM是法国Dolibarr基金会的一套基于Web的企业资源计划（ERP）和客户关系管理（CRM）系统。该系统可用来管理产品、库存、发票、订单等。 Dolibarr ERP/CRM 15.0.3及以前版本存在安全漏洞，该漏洞源于攻击者可以在dolibarr的安装页面中添加任何管理员，如果添加成功，则可以向数据库中插入恶意代码并通过eval执行实现Eval注入。
File Snapshot

 # Dolibarr edit.php 远程命令执行漏洞 CVE-2022-40871

## 漏洞描述

Dolibarr edit.php 存在远程命令执行漏洞，攻击者通过逻辑漏洞创建管理员后可以

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.