CVE-2024-8353 PoC — GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object Injection

Source

https://github.com/0xb0mb3r/CVE-2024-8353-PoC

Associated Vulnerability

Title:GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Unauthenticated PHP Object Injection (CVE-2024-8353)
Description:The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.1 via deserialization of untrusted input via several parameters like 'give_title' and 'card_address'. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files and achieve remote code execution. This is essentially the same vulnerability as CVE-2024-5932, however, it was discovered the the presence of stripslashes_deep on user_info allows the is_serialized check to be bypassed. This issue was mostly patched in 3.16.1, but further hardening was added in 3.16.2.

Description

Proof-of-Concept for CVE-2024-5932  GiveWP PHP Object Injection

Readme

# Proof-Of-Concept Code for CVE-2024-8353

This repository contains a script for exploiting the CVE-2024-8353 vulnerability in the GiveWP plugin for WordPress. This vulnerability allows unauthenticated PHP Object Injection, potentially leading to remote code execution.

## Overview

The provided scripts demonstrate the exploit:

- **Python Script**: Automates the process of identifying vulnerable forms, retrieving nonces, and delivering payloads to trigger the vulnerability.
- **PHP Script**: Serves as a crafted payload to showcase the deserialization attack mechanics.

### Vulnerability Description

CVE-2024-8353 affects versions of the GiveWP plugin up to and including 3.16.1. The vulnerability arises due to improper handling of serialized input through parameters like `give_title` and `card_address`. Attackers can exploit this to inject and execute arbitrary PHP code.


## Prerequisites

- Python 3.x
- PHP 7.x or later
- Required Python packages listed in `requirements.txt`

## Usage

### Python Script

1. Install dependencies:
   ```bash
   pip install -r requirements.txt
   ```

2. Example command:
   ```bash
   python3 exploit.py --url https://target-wordpress-site.com --cmd "cat /etc/passwd"
   ```

3. Run the script:
   ```bash
   pip install -r requirements.txt
   ```

2. Run the script:
   ```bash
   python3 exploit.py --url <TARGET_URL> --cmd <COMMAND>
   ```

## Disclaimer

This repository is intended for educational purposes only. Use responsibly and only on systems you own or have explicit permission to test. The author is not responsible for any damage caused by the use of this exploit.

## Contributions

Contributions to improve the scripts or enhance their functionality are welcome. Please submit a pull request or create an issue for discussion.

## License

This project is licensed under the MIT License. See the [LICENSE](LICENSE) file for details.

File Snapshot


 [4.0K]  /data/pocs/1d2d40f8360f8120e4ed56e16e01276d235a4fed
├── [8.7K]  exploit.py
├── [1.0K]  LICENSE
├── [ 903]  payload.php
├── [1.9K]  README.md
└── [  26]  requirements.txt

0 directories, 5 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!