CVE-2024-31982 PoC — XWiki Platform 安全漏洞

Source

https://github.com/th3gokul/CVE-2024-31982

Associated Vulnerability

Title:XWiki Platform 安全漏洞 (CVE-2024-31982)
Description:XWiki Platform是XWiki基金会的一套用于创建Web协作应用程序的Wiki平台。 XWiki Platform 存在安全漏洞，该漏洞源于 XWiki 的数据库搜索允许通过搜索文本远程执行代码。这允许公共 wiki 的任何访问者或封闭 wiki 的用户远程执行代码，因为默认情况下所有用户都可以访问数据库搜索。

Description

A tool for vulnerability detection and exploitation tool for CVE-2024-31982

Readme

# CVE-2024-31982
CVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-31982
### Installation
```bash
git clone https://github.com/th3gokul/CVE-2024-31982.git
cd CVE-2024-31982
pip install -r requirements.txt
python3 cvehunter.py --help
```
### Usage

```yaml
python3 cvehunter.py -h

  ____ __     __ _____  _   _                _               
 / ___|\ \   / /| ____|| | | | _   _  _ __  | |_   ___  _ __ 
| |     \ \ / / |  _|  | |_| || | | || '_ \ | __| / _ \| '__|
| |___   \ V /  | |___ |  _  || |_| || | | || |_ |  __/| |   
 \____|   \_/   |_____||_| |_| \__,_||_| |_| \__| \___||_| 
     CVE-2024-31982                      @th3gokul

[Description]: Vulnerability Detection and Exploitation
tool for CVE-2024-31982

options:
  -h, --help            show this help message and exit
  -u URL, --url URL     [INF]: Specify a URL or domain
                        for vulnerability detection
  -l LIST, --list LIST  [INF]: Specify a list of URLs
                        for vulnerability detection
  -t THREADS, --threads THREADS
                        [INF]: Number of threads for
                        list of URLs
  -proxy PROXY, --proxy PROXY
                        [INF]: Proxy URL to send request
                        via your proxy
  -v, --verbose         [INF]: Increases verbosity of
                        output in console
  -o OUTPUT, --output OUTPUT
                        [INF]: Filename to save output
                        of vulnerable target]

```

### About
The tool is Developed  by [th3Gokul](https://www.linkedin.com/in/gokul-v-13455521a/) and [D.Sanjai Kumar](https://www.linkedin.com/in/d-sanjai-kumar-109a7227b/) Open Source tool developer at RevoltSecurities and the tool is developed for security reseachers and Ethical hackers to know more and exploit the CVE-2024-31982
### Disclaimer
The tool is only for education and ethical purpose only and Developers are not responsible for any illegal exploitations.

File Snapshot


 [4.0K]  /data/pocs/8c90d84415e1a5496bfad6cff3941436e7ce085e
├── [7.0K]  cvehunter.py
├── [1.9K]  README.md
└── [ 114]  requirements.txt

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!