CVE-2020-11546 PoC — SuperWebMailer 注入漏洞

Source

https://github.com/Official-BlackHat13/CVE-2020-11546

Associated Vulnerability

Title: SuperWebMailer 注入漏洞 (CVE-2020-11546)
Description:SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php. An unauthenticated remote attacker can exploit this behavior to execute arbitrary PHP code via Code Injection.

Description

SuperWebMailer RCE

Readme

# CVE-2020-11546

SuperWebMailer RCE

USAGE 

python3 CVE-2020-11546.py -h, --help  show this help message and exit

python3 CVE-2020-11546.py -u https://target.com

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →