CVE-2023-6875 PoC — POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization B

Source

Associated Vulnerability

Description

CVE-2023-6875 exploit written for Xakep.Ru

Readme

## What the exploit does
- Places a token that allows you to view mail.
- Finds the admin's username; if it can't find it, then sets "admin" as the default.
- It requests a link to reset the admin's password, which is emailed to the admin.
- Uses the token placed in the first step and examines the mail logs.
- Selects the most recent log, which contains a link to reset the password.
- Resets the password using the link received in the previous step.
- Logs in as the admin.
- Uploads the shell (a file named shell.zip, which contains a shell).

![exploit demo](https://i.imgur.com/RwCinvZ.gif)

## Usage
1. **Clone:** Clone this repository.
2. **Install Golang:** Install the latest Golang from https://go.dev/dl/. For example:
    ```
    wget https://go.dev/dl/go1.21.6.linux-amd64.tar.gz
    tar -C /usr/local -xzf go1.21.6.linux-amd64.tar.gz
    export PATH=$PATH:/usr/local/go/bin
    go version
    ```
2. **Run the exploit:**
   ```
   go run exploit.go https://example.com
   ```

## Author
Exploit is developed by az_AZ

File Snapshot

 [4.0K]  /data/pocs/3a8c3ea2e7f6dfce9904983d748481dc32c12878
├── [ 15K]  exploit.go
├── [1.0K]  README.md
└── [ 197]  shell.zip

0 directories, 3 files

Remarks