Exploit for CVE-2026-23698

githubexploit · 2026-07-07

Description

CVE-2026-23698 vulnerability with no public description; refer to vendor advisories.

Parameter__vtrftk · request body

Path/index.php

Module import vulnerability allows uploading a crafted ZIP that is extracted into modules/ and a PHP shell is placed in modules//shell.php

5.9

MEDIUM SEVERITY

Version NONE

VectorNONE

99%confidence this exploit runs

Based on 1 file(s) in the source

1.2%higher than 66.8% of all CVEs

Updated 2026-09-03

Modified:2026-07-07 16:29

Last Seen:2026-07-07 16:39

Reporter:JivaSecurity

Written in:Python

Last commit:2026-07-07

README2 lines

## https://sploitus.com/exploit?id=14650063-3D49-54CB-9783-6AB58C984EFA
Vtiger CRM 8.3.0, 8.4.0 Module Import Authenticated RCE PoC