Sploitus

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Gvectors Wpforo Forum

githubexploit · 2023-06-13

Exploit Code

README14 lines
## https://sploitus.com/exploit?id=80F65B57-6EE1-58C3-A153-5E0346274062
# Original Proof of Concept for CVE-2023-2249

- Proof of Concept for vulnerability CVE-2023-2249 in wpForo Forum plugin for WordPress
- POC Author : https://github.com/Ayantaker/

## Related Details

- NVD Link : https://nvd.nist.gov/vuln/detail/CVE-2023-2249
- Vulnerable versions : `version  Whatever payload is passed to -f is passed internally to `file_get_contents` method of PHP without sanitization, so this enables LFI, PHAR Deserialization, SSRF etc.

## Disclaimer

This Proof of Concept (POC) has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intended to be used to attack systems except where explicitly authorized. Author is not responsible or liable for any misuse of the POC. Use responsibly.