Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2023-4596 PoC — WordPress plugin Forminator 代码问题漏洞

Source
Associated Vulnerability
Title:WordPress plugin Forminator 代码问题漏洞 (CVE-2023-4596)
Description:WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress plugin Forminator 存在代码问题漏洞,该漏洞源于容易受到任意文件上传攻击。
Readme
# Exploit Script

This repository contains a Python script (`exp.py`) designed to check for vulnerabilities FORMINATOR RCE and execute a reverse shell on a given URL.

## Usage

## checker
```sh
python check.py
```
To use the script, run the following command:
```sh
python3 exp.py -u http://127.0.0.1:8000/?p=7
```
## check vuln or not
```sh
python3 exp.py -u http://127.0.0.1:8000/?p=7 -v
```

## reverse shell
```sh
python3 exp.py -u http://127.0.0.1:8000/?p=7 -r
```
File Snapshot

[4.0K] /data/pocs/e70eaf8f6743099fac0df0adf092abda70dcd197 ├── [2.2K] check.py ├── [ 11K] exp.py ├── [2.8K] fr.txt ├── [ 471] README.md └── [ 752] vuln.txt 0 directories, 5 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.