CVE-2023-1773
MEDIUMRockoa 2.3.2 - Code Injection in Configuration File Handler
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2023-1773. PoCs published by CRONUS-Security, C1oudfL0w0.
AI-analyzed exploit summary This repository contains a debug environment for CVE-2023-1773, targeting the Xinhu OA system v2.3.2. It includes a modified `reimplatAction.php` file to expose encoded/decoded data for debugging purposes.
Description
A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of the file webmainConfig.php of the component Configuration File Handler. The manipulation leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224674 is the identifier assigned to this vulnerability.
Exploits (2)
This repository contains a debug environment for CVE-2023-1773, targeting the Xinhu OA system v2.3.2. It includes a modified `reimplatAction.php` file to expose encoded/decoded data for debugging purposes.
This PoC exploits CVE-2023-1773 in XinhuOA by changing the admin password and injecting a PHP payload via a vulnerable API endpoint, leading to remote code execution (RCE). The exploit uses a custom encoding function (`strlook`) to obfuscate payloads and leverages session management for authentication bypass.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L