SpiderControl SCADA Web Server File Upload Vulnerability
# CVE-2024-8232 – SpiderControl SCADA Web Server File Upload Vulnerability
## Summary
SpiderControl SCADA Web Server is vulnerable to unauthenticated arbitrary file uploads, allowing attackers to upload malicious scripts (e.g., web shells) and gain remote code execution.
- **CVE ID**: CVE-2024-8232
- **Vendor**: iniNet Solutions GmbH
- **Affected Product**: SpiderControl SCADA Web Server
- **Impact**: Remote Code Execution
- **Exploit Type**: Unauthenticated File Upload
## ⚠ Disclaimer
This proof of concept is for educational purposes **only**. Do not use against systems without explicit authorization.
## 🛠️ Usage
```bash
python3 poc.py http://TARGET-IP upload.php shell.php
登录后查看神龙缓存的 POC 文件快照
登录查看