CVE-2024-7954 PoC — SPIP 安全漏洞

Source

https://github.com/r0otk3r/CVE-2024-7954

Associated Vulnerability

Title:SPIP 安全漏洞 (CVE-2024-7954)
Description:SPIP是SPIP开源的一个用于创建 Internet 站点的免费软件。 SPIP存在安全漏洞，该漏洞源于容易受到任意代码执行漏洞的影响，远程未经身份验证的攻击者可以通过发送精心设计的HTTP请求以SPIP用户身份执行任意PHP。

Readme

# CVE-2024-7954 - SPIP 4.2.8 Remote Command Execution (RCE) Exploit

This script exploits a Remote Code Execution vulnerability in SPIP version 4.2.8 via the `porte_plume_previsu` endpoint. The vulnerability allows unauthenticated attackers to inject PHP code through preview rendering of crafted image tags.

> **CVE ID:** CVE-2024-7954  
> **Component:** SPIP CMS (`porte_plume_previsu`)  
> **Impact:** Unauthenticated Remote Command Execution  
> **Severity:** Critical

---

##  Exploit Capabilities

- Execute arbitrary system commands
- Retrieve live command output
- Automatically extract and display IP geolocation info
- Proxy support (Burp/ZAP or other)

---

##  Usage

```bash
python3 cve_2024_7954_rce.py --url <TARGET_URL> --cmd <COMMAND> [--proxy <IP:PORT>]
```
---
#### Example 1

```bash
python3 cve_2024_7954_rce.py --url <TARGET_URL> --cmd "whoami" --proxy "127.0.0.1:8080"
```
![who](https://github.com/user-attachments/assets/85cdcd92-743b-44b2-9004-e47eeaf0cbc5)
#### Burp Suite Request/Response:
![bwho](https://github.com/user-attachments/assets/d09a61fb-82ed-4cdd-ac40-09c5f298a4de)
---
#### Example 2

```bash
python3 cve_2024_7954_rce.py --url <TARGET_URL> --cmd "id" --proxy "127.0.0.1:8080"
```
![id](https://github.com/user-attachments/assets/e2c599a3-2784-4a2a-9ad8-93ae64ed105d)
#### Burp Suite Request/Response:
![bid](https://github.com/user-attachments/assets/929341a3-ca5e-40a9-abbc-5fa7efef6edc)
---
#### Example 3
```bash
python3 cve_2024_7954_rce.py --url <TARGET_URL> --cmd "uname -a" --proxy "127.0.0.1:8080"
```
![uname](https://github.com/user-attachments/assets/508c75da-f993-48c7-8b41-5f48beac006d)
##### Burp Suite Request/Response:
![b uname](https://github.com/user-attachments/assets/690471be-4691-4ea3-bc2b-f318c4874872)
---

## ⚠️ Disclaimer


This exploit script is for authorized security testing, defensive research, and educational purposes only.

---

## Official Channels

- [YouTube @rootctf](https://www.youtube.com/@rootctf)
- [X @r0otk3r](https://x.com/r0otk3r)

File Snapshot


 [4.0K]  /data/pocs/f635bc233d6fe5c405542e8b90bb6ef558269998
├── [4.1K]  cve_2024_7954_rce.py
└── [2.0K]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!