CVE-2024-8517 PoC — SPIP 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8517.yaml

Associated Vulnerability

Title:SPIP 安全漏洞 (CVE-2024-8517)
Description:SPIP是SPIP开源的一个用于创建 Internet 站点的免费软件。 SPIP 4.3.2、4.2.16和4.1.18之前版本存在安全漏洞，该漏洞源于命令注入问题，可能允许远程未经身份验证的攻击者通过发送特制的多部分文件上传HTTP请求来执行任意操作系统命令。

Description

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request.

File Snapshot


 id: CVE-2024-8517

info:
  name: SPIP BigUp Plugin - Remote Code Execution
  author: DhiyaneshDk
  s

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!