CVE-2023-35885
CRITICAL EXPLOITED IN THE WILD NUCLEICloudPanel 2.0.0-2.3.0 - Unauthenticated Remote Code Execution via File Manager Cookie
Title source: llmExploitation Summary
CVE-2023-35885 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 2 public exploits from researchers including datackmy, Chocapikk. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a working exploit for CVE-2023-35885, targeting CloudPanel versions 2.0.0 to 2.3.0. The exploit leverages a deserialization vulnerability to upload a webshell and execute commands, ultimately adding a sudo-privileged user.
Description
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
Exploits (2)
This repository contains a working exploit for CVE-2023-35885, targeting CloudPanel versions 2.0.0 to 2.3.0. The exploit leverages a deserialization vulnerability to upload a webshell and execute commands, ultimately adding a sudo-privileged user.
This repository contains a functional exploit for CVE-2023-35885, targeting CloudPanel 2 versions prior to 2.3.1. The exploit leverages insecure file-manager cookie authentication to achieve remote code execution (RCE) with root privileges by uploading a malicious PHP shell.
Nuclei Templates (1)
title:"Cloudpanel" || http.title:"cloudpanel" || http.favicon.hash:"151132309"
icon_hash="151132309" || title="cloudpanel"
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H