Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-2928 PoC — Desdev DedeCMS 代码注入漏洞

Source
https://github.com/Threekiii/Awesome-POC/blob/master/CMS%E6%BC%8F%E6%B4%9E/DedeCMS%205.7%20file_manage_control.php%20%E6%96%87%E4%BB%B6%E5%8C%85%E5%90%AB%20RCE%20CVE-2023-2928.md
Associated Vulnerability
Title:Desdev DedeCMS 代码注入漏洞 (CVE-2023-2928)
Description:Desdev DedeCMS（织梦内容管理系统）是中国卓卓网络（Desdev）公司的一套基于PHP的开源内容管理系统（CMS）。该系统具有内容发布、内容管理、内容编辑和内容检索等功能。 DedeCMS 5.7.106之前版本存在代码注入漏洞，该漏洞源于文件uploads/dede/article_allowurl_edit.php存在问题，对参数allurls的操作会导致代码注入。
File Snapshot

 # DedeCMS 5.7 file_manage_control.php 文件包含 RCE CVE-2023-2928

## 漏洞描述

版本 5.7.106 之前的 DedeCMS 中存在漏洞，

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.