CVE-2023-50564 PoC — Pluck 安全漏洞

Source

https://github.com/rwexecute/CVE-2023-50564

Associated Vulnerability

Title:Pluck 安全漏洞 (CVE-2023-50564)
Description:Pluck是一套使用PHP语言开发的内容管理系统（CMS）。 Pluck v4.7.18版本存在安全漏洞，该漏洞源于组件 /inc/modules_install.php 中存在任意文件上传漏洞，允许攻击者通过上传精心设计的 ZIP 文件来执行任意代码。

Description

Python Script to exploit CVE-2023-50564

Readme

# CVE-2023-50564
For educational purposes only.

This script abuses [CVE-2023-50564](https://nvd.nist.gov/vuln/detail/CVE-2023-50564) to upload a reverse-php shell to the target server.

You can use a shell like [this one](https://github.com/pentestmonkey/php-reverse-shell/blob/master/php-reverse-shell.php). Just zip the php file and pass the zip to this script.
## Example 
```bash
python3 cve-2023-50564.py -u http://idonot.exist -f shell.zip -p hunter2
```

File Snapshot


 [4.0K]  /data/pocs/dcf3c922244ea3eeab7b00e6a92ce41727e92131
├── [2.2K]  cve-2023-50564.py
├── [1.0K]  LICENSE
└── [ 463]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!