Exploitation Summary
EIP tracks 3 public exploits for CVE-2023-38836.
PoCs published by 1337kid, 1337kid, bwatters-r7, including Metasploit module exploits/multi/http/cve_2023_38836_boidcms.
AI-analyzed exploit summary This exploit leverages an authenticated file upload vulnerability in BoidCMS v2.0.0 to upload a malicious PHP shell, enabling remote command execution. It authenticates as an admin, uploads a shell disguised as a GIF, and provides interactive command execution.
Description
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.
Exploits (3)
This exploit leverages an authenticated file upload vulnerability in BoidCMS v2.0.0 to upload a malicious PHP shell, enabling remote command execution. It authenticates as an admin, uploads a shell disguised as a GIF, and provides interactive command execution.
This repository contains a functional exploit for CVE-2023-38836, an authenticated file upload vulnerability in BoidCMS <= 2.0.0. The exploit bypasses MIME type checks by prepending a GIF header to a PHP shell, achieving remote code execution (RCE) via a reverse shell.
This Metasploit module exploits CVE-2023-38836, a command injection vulnerability in BoidCMS 2.0.0 and below, by uploading a malicious PHP file disguised as a GIF and executing arbitrary commands via a reverse shell.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H