CVE-2022-35914 PoC — GLPI 注入漏洞

Source

https://github.com/Johnermac/CVE-2022-35914

Associated Vulnerability

Title: GLPI 注入漏洞 (CVE-2022-35914)
Description:/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

Description

Script in Ruby for the CVE-2022-35914 - RCE in GLPI

Readme

Script in Ruby for the CVE-2022-35914 - RCE in GLPI 

<h1 align="center">
  <br>
  # CVE-2022-35914
 
  <br>
  
  <br>
  <img src="https://user-images.githubusercontent.com/115858996/223286025-9c2bf0a3-62ad-45c8-89b8-36f347b1954d.png">
  <br>  
</h1>

Just add the Target to the Script.

<b>Usage:</b>
```bash
ruby.exe exploit.rb
=> whoami
```

<b>You can close with:</b>
```bash
=> exit
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →