POC详情： f635bc233d6fe5c405542e8b90bb6ef558269998

来源
https://github.com/r0otk3r/CVE-2024-7954
关联漏洞
标题： SPIP 安全漏洞 (CVE-2024-7954)
描述：SPIP是SPIP开源的一个用于创建 Internet 站点的免费软件。 SPIP存在安全漏洞，该漏洞源于容易受到任意代码执行漏洞的影响，远程未经身份验证的攻击者可以通过发送精心设计的HTTP请求以SPIP用户身份执行任意PHP。
介绍
# CVE-2024-7954 - SPIP 4.2.8 Remote Command Execution (RCE) Exploit

This script exploits a Remote Code Execution vulnerability in SPIP version 4.2.8 via the `porte_plume_previsu` endpoint. The vulnerability allows unauthenticated attackers to inject PHP code through preview rendering of crafted image tags.

> **CVE ID:** CVE-2024-7954  
> **Component:** SPIP CMS (`porte_plume_previsu`)  
> **Impact:** Unauthenticated Remote Command Execution  
> **Severity:** Critical

---

##  Exploit Capabilities

- Execute arbitrary system commands
- Retrieve live command output
- Automatically extract and display IP geolocation info
- Proxy support (Burp/ZAP or other)

---

##  Usage

```bash
python3 cve_2024_7954_rce.py --url <TARGET_URL> --cmd <COMMAND> [--proxy <IP:PORT>]
```
---
#### Example 1

```bash
python3 cve_2024_7954_rce.py --url <TARGET_URL> --cmd "whoami" --proxy "127.0.0.1:8080"
```
![who](https://github.com/user-attachments/assets/85cdcd92-743b-44b2-9004-e47eeaf0cbc5)
#### Burp Suite Request/Response:
![bwho](https://github.com/user-attachments/assets/d09a61fb-82ed-4cdd-ac40-09c5f298a4de)
---
#### Example 2

```bash
python3 cve_2024_7954_rce.py --url <TARGET_URL> --cmd "id" --proxy "127.0.0.1:8080"
```
![id](https://github.com/user-attachments/assets/e2c599a3-2784-4a2a-9ad8-93ae64ed105d)
#### Burp Suite Request/Response:
![bid](https://github.com/user-attachments/assets/929341a3-ca5e-40a9-abbc-5fa7efef6edc)
---
#### Example 3
```bash
python3 cve_2024_7954_rce.py --url <TARGET_URL> --cmd "uname -a" --proxy "127.0.0.1:8080"
```
![uname](https://github.com/user-attachments/assets/508c75da-f993-48c7-8b41-5f48beac006d)
##### Burp Suite Request/Response:
![b uname](https://github.com/user-attachments/assets/690471be-4691-4ea3-bc2b-f318c4874872)
---

## ⚠️ Disclaimer


This exploit script is for authorized security testing, defensive research, and educational purposes only.

---

## Official Channels

- [YouTube @rootctf](https://www.youtube.com/@rootctf)
- [X @r0otk3r](https://x.com/r0otk3r)
文件快照

 [4.0K]  /data/pocs/f635bc233d6fe5c405542e8b90bb6ef558269998
├── [4.1K]  cve_2024_7954_rce.py
└── [2.0K]  README.md

0 directories, 2 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。