Demo web server# CVE-2025-34100-demo
Demo web server
> [!NOTE]
> Please note that this is just the PHP files for the website, to understand the CVE better and create a more effective PoC, visit https://nvd.nist.gov/vuln/detail/CVE-2025-34100
>
> These files will not cause the CVE, but rather are the entry point to exploit the CVE. The CVE is found in the CMS.
Please put the files like this:
```bash
/var/www/html/biteinstall/
├── index.php
├── pages
│ ├── about.php
│ ├── home.php
│ ├── refund.php
│ ├── shop.php
│ └── thankyou.php
└── photo
├── cheeseburger.jpg
├── cookie.jpg
├── pizza.jpg
└── ramen.jpg
```
Ensure that in the refund.php file, the IP ADDRESS is correct!:
```php
<form method="post" action="http://[YOUR IP ADDRESS FOR YOUR MACHINE]:80/themes/dashboard/assets/plugins/jquery-file-upload/server/php/" enctype="multipart/form-data">
<label>Attach a photo of your receipt</label><br>
<input type="file" name="files[]" />
<input type="submit" value="send" />
</form>
```
Wow, getting ideas for EH? Too bad, CVE is too old for you.
How about trying a buffer overflow? I heard that's good.
登录后查看神龙缓存的 POC 文件快照
登录查看