CVE-2022-27925 PoC — Zimbra Collaboration Suite 路径遍历漏洞

Source

https://github.com/Chocapikk/CVE-2022-27925-Revshell

Associated Vulnerability

Title:Zimbra Collaboration Suite 路径遍历漏洞 (CVE-2022-27925)
Description:Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.

Description

Python Script to exploit Zimbra Auth Bypass + RCE (CVE-2022-27925)

Readme

Zimbra Unauthenticated Remote Code Execution Exploit (CVE-2022-27925)

```bash
 _____   _           __              
/__  /  (_)___ ___  / /_  _________ _
  / /  / / __ `__ \/ __ \/ ___/ __ `/
 / /__/ / / / / / / /_/ / /  / /_/ / 
/____/_/_/ /_/ /_/_.___/_/   \__,_/  
                    CVE-2022-27925   
            
usage: exp.py [-h] [-t TARGET] [-m MASS] [-l LHOST] [-p LPORT]

options:
  -h, --help            show this help message and exit
  -t TARGET, --target TARGET
                        URl with protocol HTTPS
  -m MASS, --mass MASS  List of targets
  -l LHOST, --lhost LHOST
                        Local IP for reverse shell
  -p LPORT, --lport LPORT
                        Local port for reverse shell


```

File Snapshot


 [4.0K]  /data/pocs/3ed80e9ce71e4cdd7b3269e2a80cfad5475c41c5
├── [9.8K]  exp.py
└── [ 728]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!