Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2023-50564

Description

An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file.

POC

Reference

No PoCs from references.

Github

- https://github.com/0xDTC/Pluck-CMS-v4.7.18-Remote-Code-Execution-CVE-2023-50564

- https://github.com/Mrterrestrial/CVE-2023-50564

- https://github.com/Rai2en/CVE-2023-50564_Pluck-v4.7.18_PoC

- https://github.com/TanveerS1ngh/Pluck-CMS-v4.7.18-Remote-Code-Execution-CVE-2023-50564

- https://github.com/glynzr/CVE-2023-50564

- https://github.com/ipuig/CVE-2023-50564

- https://github.com/rwexecute/CVE-2023-50564

- https://github.com/szmpns/HackTheBox-Writeups

- https://github.com/thefizzyfish/CVE-2023-50564-pluck

- https://github.com/xpltive/CVE-2023-50564