CVE-2024-23108

The repository contains a functional Python exploit for CVE-2024-23108, demonstrating unauthenticated command injection in Fortinet FortiSIEM via crafted XML payloads sent to the Phoenix Monitor service. The exploit constructs a malicious XML payload with command injection in the mount_point field and sends it over SSL to trigger blind command execution as root.

This repository contains a functional exploit for CVE-2024-23108, a command injection vulnerability in FortiSIEM appliances. The exploit sends a crafted XML payload to the Phoenix Monitor service on port 7900, allowing blind command execution as root.