CVE-2023-4596 PoC — WordPress plugin Forminator 代码问题漏洞

Source

https://github.com/AlabamicHero/caldera_sandcat-usecase

Associated Vulnerability

Title:WordPress plugin Forminator 代码问题漏洞 (CVE-2023-4596)
Description:WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress plugin Forminator 存在代码问题漏洞，该漏洞源于容易受到任意文件上传攻击。

Description

special thanks to E1A for the POC of the CVE Exploit found here: https://github.com/E1A/CVE-2023-4596

Readme

Special thanks to E1A for POC found here: https://github.com/E1A/CVE-2023-4596

File Snapshot


 [4.0K]  /data/pocs/ce24b72ee8fb92e056e1ae7a82527b5f0caab600
├── [4.5K]  autoExploit.sh
├── [ 796]  checker.bat
├── [ 802]  checker.sh
├── [1.5K]  docker-compose.yml
├── [4.0K]  ExfilWeb
│   ├── [4.0K]  downloads
│   │   └── [ 12K]  exfil.exe
│   ├── [ 772]  powershell.txt
│   ├── [4.0K]  __pycache__
│   │   └── [ 743]  server.cpython-310.pyc
│   ├── [1.0K]  server.py
│   └── [4.0K]  templates
│       └── [ 439]  index.html
├── [ 11K]  exploitformauto.py
├── [ 11K]  exploitform.py
└── [  79]  README.md

4 directories, 12 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!