Craft CMS CVE-2023-41892 远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-41892
• https://www.exploit-db.com/exploits/51918
• https://github.com/0xfalafel/CraftCMS_CVE-2023-41892
• https://www.rapid7.com/db/modules/exploit/linux/http/craftcms_unauth_rce_cve_2023_41892/
• https://www.acunetix.com/vulnerabilities/web/craft-cms-rce-cve-2023-41892/
• https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=34630
• https://motasemhamdan.medium.com/craft-cms-cve-2023-41892-vulnerability-exploitation-poc-6670a5e2ef53
• https://threatprotect.qualys.com/2023/09/25/craft-cms-remote-code-execution-vulnerability-cve-2023-41892/
• https://www.twingate.com/blog/tips/cve-2023-41892

Related Vulnerabilities

• PoCCVE-2026-65442: FormCraft3 <= 3.9.15 - Server-Side Request Forgery
• PoCcraftcms-debug-exposure: CraftCMS Debug Methods Exposed
• PoCcraftcms-install-exposure: Craft CMS Installation Wizard Exposure
• PoCcraftcms-log-disclosure: Craft CMS - Log File Disclosure
• Craft CMS register_argc_argv 代码执行漏洞（CVE-2024-56145）
• qizhi-fortressaircraft-unauthorized: qizhi fortressaircraft unauthorized
• CrafterCMS存在XSS漏洞(CVE-2023-4136)
• PoCCVE-2020-9757: Craft CMS < 3.3.0 - Server-Side Template Injection
• PoCCVE-2021-41749: CraftCMS SEOmatic - Server-Side Template Injection
• PoCCVE-2022-0591: Formcraft3 <3.8.28 - Server-Side Request Forgery
• PoCCVE-2023-4136: CrafterCMS Engine - Cross-Site Scripting
• PoCCVE-2023-41892: CraftCMS < 4.4.15 - Unauthenticated Remote Code Execution