CVE-2023-35885

This repository contains a working exploit for CVE-2023-35885, targeting CloudPanel versions 2.0.0 to 2.3.0. The exploit leverages a deserialization vulnerability to upload a webshell and execute commands, ultimately adding a sudo-privileged user.

This repository contains a functional exploit for CVE-2023-35885, targeting CloudPanel 2 versions prior to 2.3.1. The exploit leverages insecure file-manager cookie authentication to achieve remote code execution (RCE) with root privileges by uploading a malicious PHP shell.