漏洞描述
Frappe 是一个低代码框架。Frappe Framework 存在默认口令 。攻击者可通过默认口令漏洞控制整个平台，使用管理员权限操作核心的功能。
Frappe-Framework 框架默认口令漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2020-0646: Microsoft .NET Framework - Remote Code Execution
- POC spring4shell-CVE-2022-22965: Spring Framework RCE via Data Binding on JDK 9+
- POC CVE-2016-6601: ZOHO WebNMS Framework <5.2 SP1 - Local File Inclusion
- POC CVE-2017-1000163: Phoenix Framework - Open Redirect
- POC CVE-2018-1271: Spring MVC Framework - Local File Inclusion
- POC CVE-2020-15227: Nette Framework - Remote Code Execution
- POC CVE-2020-15920: Mida eFramework <=2.9.0 - Remote Command Execution
- POC CVE-2020-36708: WordPress Epsilon Framework Themes <=2.4.8 - Remote Code Execution
- POC CVE-2021-24435: WordPress Titan Framework plugin <= 1.12.1 - Cross-Site Scripting
- POC CVE-2021-38314: WordPress Redux Framework <=4.2.11 - Information Disclosure
- POC CVE-2022-36537: ZK Framework - Information Disclosure
- POC CVE-2024-21485: Dash Framework - Cross-site Scripting
- POC CVE-2024-29059: .NET Framework - Leaking ObjRefs via HTTP .NET Remoting