CVE-2024-58284
HIGHPopojiCMS 2.0.1 - Authenticated Remote Code Execution via Metadata Settings
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-58284. PoCs published by Ahmet Ümit BAYRAM.
AI-analyzed exploit summary This exploit targets PopojiCMS 2.0.1 by leveraging authenticated access to inject a PHP web shell into the meta social settings, enabling remote command execution via a crafted GET request. The PoC includes login functionality and payload delivery to achieve RCE.
Description
PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code through the metadata settings endpoint. Attackers can log in and modify the meta content to create a web shell that executes arbitrary system commands through a GET parameter.
Exploits (1)
This exploit targets PopojiCMS 2.0.1 by leveraging authenticated access to inject a PHP web shell into the meta social settings, enabling remote command execution via a crafted GET request. The PoC includes login functionality and payload delivery to achieve RCE.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H