Octobercms远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/advisories/GHSA-8v7h-cpc2-r8jp
• https://github.com/advisories/GHSA-79jw-2f46-wv22
• https://cyllective.com/blog/posts/cve-2022-21705-octobercms/
• https://cyllective.com/blog/posts/cve-2021-32649-octobercms/
• https://www.exploit-db.com/exploits/41936
• https://github.com/octobercms/october/security/advisories/GHSA-79jw-2f46-wv22
• https://github.com/octobercms/library/commit/c393c5ce9ca2c5acc3ed6c9bb0dab5ffd61965fe
• https://nvd.nist.gov/vuln/detail/CVE-2022-21705
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32649
• https://www.miggo.io/vulnerability-database/cve/CVE-2022-24800
• https://www.miggo.io/vulnerability-database/cve/CVE-2022-35944
• https://avd.aliyun.com/detail?id=AVD-2023-25365
• https://feedly.com/cve/vendors/octobercms
• https://pentest-tools.com/vulnerabilities-exploits/october-cms-remote-code-execution_1584
• https://github.com/octobercms/october/security/advisories/GHSA-x4q7-m6fp-4v9v

Related Vulnerabilities

• PoCCVE-2021-32648: OctoberCMS - Account Takeover
• PoCoctobercms-default-login: OctoberCMS - Default Admin Discovery
• Octobercms 安全漏洞