Sploitus

Exploit for Improper Input Validation in Teclib-Edition Fields

CVE-2026-23489

githubexploit · 2026-08-05

Exploit Code

README14 lines
## https://sploitus.com/exploit?id=642976AA-2602-5976-95B6-DCB0B8C18686
# POC CVE-2026-23489

Proof of concept for CVE-2026-23489 GLPI "Fields" plugin <= 1.23.2

```
$ python3 poc_fields_rce.py -h
usage: poc_fields_rce.py [-h] --url URL --cookie-name COOKIE_NAME --cookie-value COOKIE_VALUE --php PHP [--no-cleanup]

GLPI Fields plugin )
  --cookie-value COOKIE_VALUE
                        GLPI session cookie value
  --php PHP             Raw PHP to execute on the server (end statements with ';',  Dropdowns).
```