CVE-2023-30253 PoC — Dolibarr 操作系统命令注入漏洞

Source

https://github.com/dollarboysushil/Dolibarr-17.0.0-Exploit-CVE-2023-30253

Associated Vulnerability

Title:Dolibarr 操作系统命令注入漏洞 (CVE-2023-30253)
Description:Dolibarr是一个应用软件。一个现代软件包，可帮助管理您组织的活动。 Dolibarr 17.0.1之前版本存在安全漏洞，该漏洞源于可以通过大写操作远程执行代码。

Description

In Dolibarr 17.0.0 with the CMS Website plugin (core) enabled, an authenticated attacker can obtain remote command execution via php code injection bypassing the application restrictions.

File Snapshot


 [4.0K]  /data/pocs/8eb7237054378d60167c0dbecd1f933170d64cd9
├── [ 16K]  exploit.py
├── [4.0K]  images
│   ├── [ 30K]  Untitled 1.png
│   ├── [6.0K]  Untitled_(1).png
│   ├── [ 17K]  Untitled 2.png
│   ├── [ 33K]  Untitled_(2).png
│   ├── [ 43K]  Untitled 3.png
│   ├── [ 41K]  Untitled 4.png
│   ├── [ 45K]  Untitled_(4).png
│   ├── [ 35K]  Untitled_(5).png
│   ├── [9.9K]  Untitled_(6).png
│   ├── [7.8K]  Untitled_(7).png
│   ├── [ 27K]  Untitled_(8).png
│   ├── [ 15K]  Untitled_(9).png
│   └── [ 54K]  Untitled.png
└── [2.3K]  Readme.md

1 directory, 15 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!