漏洞描述
Dolibarr edit.php 存在远程命令执行漏洞，攻击者通过逻辑漏洞创建管理员后可以通过后台漏洞获取服务器权限
Dolibarr edit.php 远程命令执行漏洞 (CVE-2022-40871)
PoC代码
暂无相关漏洞推荐
- POC wp-admin-menu-editor-fpd: Admin Menu Editor - Full Path Disclosure
- POC wp-user-role-editor-fpd: User Role Editor - Full Path Disclosure
- POC wp-admin-menu-editor-fpd: Admin Menu Editor - Full Path Disclosure
- POC wp-user-role-editor-fpd: User Role Editor - Full Path Disclosure
- WordPress Ditty /wp-json/dittyeditor/v1/displayItems 服务器端请求伪造漏洞
- POC 天锐绿盾审批系统 editConfigVal fastjson 反序列化漏洞
- （CVE-2023-53884）Webedition CMS v2.9.8.8 存储型跨站脚本漏洞
- （CVE-2023-53883）Webedition CMS 远程代码执行漏洞
- POC unauth-kafka-config-editor: Kafka Config Editor - Unauthenticated Access
- 用友时空-KSOA /worksheet/work_edit.jsp SQL 注入漏洞
- wanhu-oa-documentedit-sqli: 万户OA DocumentEdit.jsp SQL注入漏洞
- UEditor 编辑器 /ueditor/index.html 未授权访问漏洞（CNVD-2019-07933）
- 浙大恩特客户资源管理系统 /entsoft/T0140_editAction.entweb;.js SQL 注入漏洞