CVE-2019-11447 PoC — 编号重复

介绍

# CVE-2019-11447 CuteNews 2.1.2 Reverse Shell Upload

A slightly modified version of the [Mt-Code POC](https://github.com/mt-code/CVE-2019-11447) which spawns a full reverse shell rather than a web shell.

This exploit uses the famous [PentestMonkey PHP Reverse Shell](https://github.com/pentestmonkey/php-reverse-shell).

### Install

`pip install -r requirements.txt`

### Example use:

* Create a user on the application
* Run the following
`python exploit.py http://{target}/index.php {myuser} {mypassword}`
* Open a listener and navigate to the path listed by the exploit.

![](example.png)


Disclaimer: I do not take credit for the creation of either of these scripts. 


**Follow the law.**

文件快照

备注