CVE-2023-30253 PoC — Dolibarr 操作系统命令注入漏洞

Source

https://github.com/04Shivam/CVE-2023-30253-Exploit

Associated Vulnerability

Title: Dolibarr 操作系统命令注入漏洞 (CVE-2023-30253)
Description:Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in injected data.

Description

Poc for CVE-2023-30253

Readme

# CVE-2023-30253 Exploit
Dolibarr vulnerable to remote code execution via uppercase manipulation

Affected version <17.0.1

## Usage:

pip3 install -r requirements.txt

python3 CVE-2023-30253.py

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →