CVE-2023-27179 PoC — GDidees CMS 代码问题漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27179.yaml

Associated Vulnerability

Title:GDidees CMS 代码问题漏洞 (CVE-2023-27179)
Description:GDidees CMS是GDidees公司的一个建站系统。 GDidees CMS v3.9.1版本及之前版本存在安全漏洞，该漏洞源于通过/_admin/imgdownload.php的filename参数发现包含任意文件下载漏洞。

Description

GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdownload.php.

File Snapshot


 id: CVE-2023-27179

info:
  name: GDidees CMS v3.9.1 - Arbitrary File Download
  author: theamanrawa

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!