Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2020-27976 PoC — osCommerce 操作系统命令注入漏洞

Source
https://github.com/k0rnh0li0/CVE-2020-27976
Associated Vulnerability
Title:osCommerce 操作系统命令注入漏洞 (CVE-2020-27976)
Description:osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. Within admin/mail.php, a from POST parameter can be passed to the application. This affects the PHP mail function, and the sendmail -f option.
Description
osCommerce Phoenix CE <=1.0.5.4 Authenticated RCE
File Snapshot

 [4.0K]  /data/pocs/fa9b78e7d9ee45779aea2a9779a9e5676e149833
├── [2.2K]  exploit.py
└── [1.2K]  README.txt

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →