CVE-2024-28116

This PoC exploits an authenticated Server-Side Template Injection (SSTI) vulnerability in Grav CMS <= 1.7.44 (CVE-2024-28116) to achieve remote command execution. It automates authentication, session handling, and payload injection via Twig template manipulation.

This is a functional PoC for CVE-2024-28116, an authenticated SSTI+RCE vulnerability in Grav CMS <=1.7.44. It automates the exploitation process by authenticating, creating a malicious page, and injecting an RCE payload.

This is a Python-based exploit for CVE-2024-28116, targeting Grav CMS with an authenticated RCE vulnerability. It automates the process of logging in, creating a malicious page, and executing arbitrary commands via crafted payloads.