CVE-2023-26469
CRITICAL EXPLOITED IN THE WILD NUCLEIJorani 1.0.0 - Path Traversal and Remote Code Execution
Title source: llmExploitation Summary
CVE-2023-26469 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).
EIP tracks 4 public exploits from researchers including d0rb, dyeat, Kairo-one, including a Metasploit module exploits/multi/php/jorani_path_trav.
A Nuclei detection template is also available.
AI-analyzed exploit summary The repository contains a functional exploit script for CVE-2023-26469, which leverages a path traversal vulnerability in Jorani 1.0.0 to upload a malicious PHP shell for remote code execution. The PoC demonstrates the vulnerability by sending a crafted multipart/form-data request to upload a shell.
Description
In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.
Exploits (4)
The repository contains a functional exploit script for CVE-2023-26469, which leverages a path traversal vulnerability in Jorani 1.0.0 to upload a malicious PHP shell for remote code execution. The PoC demonstrates the vulnerability by sending a crafted multipart/form-data request to upload a shell.
This repository contains a functional exploit for CVE-2023-26469, a directory traversal vulnerability in Jorani that leads to remote code execution (RCE). The exploit poisons log files with a PHP payload and triggers execution via a crafted HTTP header.
This repository contains a functional exploit for CVE-2023-26469, targeting Jorani 1.0.0. The exploit combines path traversal and log injection to achieve remote code execution by injecting malicious PHP code into log files and accessing them via traversal.
This Metasploit module exploits an unauthenticated RCE in Jorani < 1.0.2 by chaining log poisoning, header spoofing, and path traversal to execute arbitrary PHP code. It leverages a CSRF token bypass and log file inclusion to trigger the payload.
Nuclei Templates (1)
http.favicon.hash:-2032163853
icon_hash=-2032163853
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H