CVE-2023-30253
Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in injected data.
- Affected products
- Usg Flex 50(W) Series, Usg Flex H Series, Usg20(W)-Vpn Series, Zyxel Atp Series
- Dolibarr Dolibarr Erp\/crm
- < 17.0.1
- CVSS 3.1
- 8.8 HIGH
- EPSS
- 82.1% (100th percentile)
- Weakness
- CWE-78
- NVD status
- Modified
- Published
- 2023-05-29
CVE-2023-30253 at NVD
24 known exploits for CVE-2023-30253
Proof-of-concept code and exploit modules indexed by Sploitus
CVE-2023-30253
DolibabyPhp
CVE-2023-30253-PoC
Dolibarr-17.0.0-Exploit-CVE-2023-30253
CVE-2023-30253-exploit
Exploit-for-Dolibarr-17.0.0-CVE-2023-30253
cve-2023-30253
CVE-2023-30253-Exploit
POC-exploit-for-Dolibarr
Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm
GodSearch
-GodSearch
📄 Dolibarr ERP/CRM Authenticated Code Injection
Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm
Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm
Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm
Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm
Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm
Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm
Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm
Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm
Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm
Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm
Dolibarr ERP/CRM Authenticated Code Injection