MajorDoMo存在命令执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-50917
• https://www.cnblogs.com/LeouMaster/p/18200468
• https://github.com/0day404/HV-2024-POC/blob/main/MajorDoMo-thumb.php%E6%9C%AA%E6%8E%88%E6%9D%83RCE%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0(CNVD-2024-02175).md
• https://stack.chaitin.com/vuldb/detail/5d1dedc3-3e73-4bc3-b7b1-22b84d696d2d
• https://cn-sec.com/archives/2675269.html
• https://pentest-tools.com/vulnerabilities-exploits/majordomo-thumbphp-os-command-injection_22450
• https://bitninja.com/blog/majordomo-command-injection-vulnerability-explained/
• https://chocapikk.com/posts/2026/majordomo-revisited/
• https://www.resecurity.com/blog/article/critical-majordomo-rce-cve-2026-27174-unauthenticated-remote-code-execution-analysis
• https://www.rapid7.com/db/modules/exploit/multi/http/majordomo_cmd_injection_rce/

Related Vulnerabilities

• PoCCVE-2026-27174: MajorDoMo - Unauthenticated RCE
• PoCCVE-2026-27176: MajorDoMo - Cross-Site Scripting
• MajorDoMo存在SQL注入漏洞
• MajorDoMo存在XSS漏洞(CVE-2026-27176)
• PoCMajorDoMo存在远程代码执行漏洞(CVE-2026-27174)
• MajorDoMo 管理面板 /admin.php 代码执行漏洞（CVE-2026-27174）
• PoCCVE-2011-0049: Majordomo2 - SMTP/HTTP Directory Traversal
• PoCCVE-2023-50917: MajorDoMo thumb.php - OS Command Injection
• PoCCNVD-2024-02175: MajorDoMo rce
• MajorDoMo CVE-2023-50917 命令注入漏洞
• MajordomoSL /modules/thumb/thumb.php 命令执行漏洞
• MajorDoMo命令执行漏洞(CVE-2023-50917)