Exploit for OS Command Injection in Dolibarr Dolibarr Erp/Crm

githubexploit · 2024-06-24

Description

CVE-2023-30253 is a security flaw in Dolibarr 17.0.0 enabling authenticated users to execute remote code leading to unauthorized code execution

Entry point

ParameterPAGE_CONTENT · request body

Pathwebsite/index.php

Authenticated code injection through uppercase PHP tag in website content (PAGE_CONTENT) enabling RCE in Dolibarr prior to 17.0.1

Affected Dolibarr Dolibarr Erp\/crm versions

Dolibarr Dolibarr Erp\/crm< 17.0.1

All known vulnerabilities by product

Usg Flex 50(W) Series Usg Flex H Series Usg20(W)-Vpn Series Zyxel Atp Series

CVSS 8.8 for CVE-2023-30253

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

79.3%higher than 99.6% of all CVEs

Updated 2026-06-25

Exploit Details

Modified:2025-04-20 10:14

Last Seen:2025-08-31 22:08

Reporter:dollarboysushil

Written in:Python

Last commit:2024-06-24

Tags

dolibarrsecurity flawremote code executionunauthorized accessCVE-2023-30253dolibarr 17.0.0python scriptnetcat listenerexploit

Other exploits for CVE-2023-30253

Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm

2026-05-30 Jeanback1GITHUB

2026-05-26 kikechansGITHUB

2026-05-26 kikechansGITHUB

📄 Dolibarr ERP/CRM Authenticated Code Injection

2026-05-14 Emanuele Cervelli, Tinexta Cyber Offensive Security TeamPACKETSTORMRuby

Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm

2025-12-24 1lklaGITHUB

Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm

2024-09-20 bluetoothStrawberryGITHUB

Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm

2024-07-10 andria-devGITHUB

Exploit for OS Command Injection in Dolibarr Dolibarr_Erp/Crm

2024-06-21 g4nkdGITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=9CFB491D-4D92-57AD-8622-9923D95D15DF
PoC exploit for CVE-2023-30253, an authenticated remote command execution vulnerability in Dolibarr 17.0.0 with the CMS Website plugin enabled. The exploit targets a php code injection bypassing application restrictions. The probable entry point is the exploit.py script, which is likely invoked via Python CLI. The vulnerability class/vector is remote command execution (RCE). Not specified. The expected impact is remote code execution.