CVE-2024-50623 PoC — Cleo多款产品安全漏洞

Source

https://github.com/iSee857/Cleo-CVE-2024-50623-PoC

Associated Vulnerability

Title: Cleo多款产品安全漏洞 (CVE-2024-50623)
Description:In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.

Description

Cleo 远程代码执行漏洞批量检测脚本（CVE-2024-50623）

Readme

复现过程见：

https://blog.csdn.net/xc_214/article/details/144850719?sharetype=blogdetail&sharerId=144850719&sharerefer=PC&sharesource=xc_214&spm=1011.2480.3001.8118

批量检测：

python poc.py -f url.txt

单个检测：

python poc.py -u your-ip


![image](https://github.com/user-attachments/assets/13280478-bef9-4a94-9321-aae3c3767cd6)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-50623 PoC — Cleo多款产品 安全漏洞