CVE-2023-50564 PoC — Pluck 安全漏洞

Source

https://github.com/rwexecute/CVE-2023-50564

Associated Vulnerability

Title:Pluck 安全漏洞 (CVE-2023-50564)
Description:An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file.

Description

Python Script to exploit CVE-2023-50564

Readme

# CVE-2023-50564
For educational purposes only.

This script abuses [CVE-2023-50564](https://nvd.nist.gov/vuln/detail/CVE-2023-50564) to upload a reverse-php shell to the target server.

You can use a shell like [this one](https://github.com/pentestmonkey/php-reverse-shell/blob/master/php-reverse-shell.php). Just zip the php file and pass the zip to this script.
## Example 
```bash
python3 cve-2023-50564.py -u http://idonot.exist -f shell.zip -p hunter2
```

File Snapshot


 [4.0K]  /data/pocs/dcf3c922244ea3eeab7b00e6a92ce41727e92131
├── [2.2K]  cve-2023-50564.py
├── [1.0K]  LICENSE
└── [ 463]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!