CVE-2023-1773 PoC — Rockoa Configuration File webmainConfig.php code injection

Source

https://github.com/CRONUS-Security/xinhu-v2.3.2

Associated Vulnerability

Title: Rockoa Configuration File webmainConfig.php code injection (CVE-2023-1773)
Description:A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of the file webmainConfig.php of the component Configuration File Handler. The manipulation leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224674 is the identifier assigned to this vulnerability.

Description

信呼 v2.3.2 针对CVE-2023-1773的研究环境

Readme

# 信呼 v2.3.2

针对 CVE-2023-1773 的调试环境

增加了`webmain/task/api/reimplatAction.php`文件的调试参数，使得编码前后的数据传回前端

信呼 v2.3.2 源码 [rainrocka/xinhu at cb732f46f8f1e4614c8cfbef47a0bcbde6ecce34](https://github.com/rainrocka/xinhu/tree/cb732f46f8f1e4614c8cfbef47a0bcbde6ecce34)

具体的攻击过程，可以参考 [CVE-2023-1773 | Target Machines WriteUp](https://tryhackmyoffsecbox.github.io/Target-Machines-WriteUp/docs/Yunjing/CVE/CVE-2023-1773/)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →