CVE-2018-10517 PoC — CMS Made Simple 安全漏洞

Source

Associated Vulnerability

Description

CMS Made Simple 2.2.7 RCE exploit

Readme

# CVE-2018-12613
Authenticated remote command execution by uploading a fake module, dropping PHP files on remote web server.

# Software Affected
1. CMS Made Simple 2.2.7;

# How to use
This PowerShell scripts need two parameters to craft a exploit HTTP request:

    1. CMS Made Simple URL endpoint;
    2. Cookies for unauthenticated user;
    2. A command string to be executed in the remote system shell;

# Example

Prepare all the parameters to use the script:

![Screenshot](example.JPG)

Then command is executed.


Code author: @_zc00l

File Snapshot

 [4.0K]  /data/pocs/993e8147b968da3c589666319a4c41d0f906ae44
├── [4.0K]  CMS-MadeSimple-RCE.ps1
├── [ 69K]  example.JPG
└── [ 544]  README.md

0 directories, 3 files

Remarks