CVE-2023-41425 PoC — WonderCMS 安全漏洞

Source

https://github.com/h3athen/CVE-2023-41425

Associated Vulnerability

Title:WonderCMS 安全漏洞 (CVE-2023-41425)
Description:Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

Description

Writing one because the one I found isn't working

Readme

# CVE-2023-41425
Writing one because the one I found isn't working

# Usage
```bash
python3 exploit.py http://example.com/loginURL 10.10.xx.xx 9001
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!