CVE-2023-46818 PoC — ISPConfig 安全漏洞

Source

https://github.com/vulnerk0/CVE-2023-46818

Associated Vulnerability

Title: ISPConfig 安全漏洞 (CVE-2023-46818)
Description:An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled.

Description

Python PoC for CVE-2023-46818

Readme

# CVE-2023-46818 PoC
This is a python implemntation of the PoC provided by Egidio Romano aka EgiX [Over here](https://karmainsecurity.com/pocs/CVE-2023-46818.php), this exploit will prompt you a webshell, for a fully interactive shell execute a command and send yourself a reveseshell.

#### Usage
```shell
python exploit.py http://localhost username password
```

#### Disclaimer
The author of this PoC doesn't hold any responsibility for any one's actions, use this exploit in CTFs or in demonstrations only.

-Vulner AKA Abumalik

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →