CVE-2020-35314

This exploit leverages an authenticated remote code execution vulnerability in WonderCMS 3.1.3 by installing a malicious plugin via the theme/plugin installer feature. It requires valid credentials and a session token to deploy a webshell for command execution.

This repository contains a fake plugin for WonderCMS 3.1.3 that includes a backdoor PHP shell (evil.php) to exploit an authenticated Remote Code Execution vulnerability (CVE-2020-35314). The exploit requires authentication and leverages a malicious plugin to achieve RCE.

The repository contains a functional exploit for CVE-2020-35314, demonstrating a command injection vulnerability in WonderPlugin. The `evil.php` file executes the `id` command when a POST request with the parameter `id` is received, confirming remote code execution (RCE).