CVE-2023-28343 PoC — Altenergy Power System Control Software 操作系统命令注入漏洞

Source

https://github.com/superzerosec/CVE-2023-28343

Associated Vulnerability

Title:Altenergy Power System Control Software 操作系统命令注入漏洞 (CVE-2023-28343)
Description:OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, because of set_timezone in models/management_model.php.

Description

CVE-2023-28343 POC exploit

Readme

# CVE-2023-28343
CVE-2023-28343 POC exploit

# Usage
```shell
usage: exploit.py [-h] -t TARGET [-l LOCALHOST] [-p LOCALPORT]

optional arguments:
  -h, --help            show this help message and exit
  -t TARGET, --target TARGET
                        Target url, http://localhost:9000
  -l LOCALHOST, --localhost LOCALHOST
                        Local IP address for reverse shell
  -p LOCALPORT, --localport LOCALPORT
                        Local port for reverse shell
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!