Exploit for Improper Control of Dynamically-Managed Code Resources in Crushftp

CVE-2023-43177

githubexploit · 2023-12-27

Description

Crushftp 10.5.1 Remote Code Execution CVE-2023-43177

Entry point

Parameteras2-to · header

PathWebInterface/function/?command=getUsername

Unauthenticated API call to getUsername via crafted header values enabling session manipulation

Affected Crushftp versions

Crushftp< 10.5.2

All known vulnerabilities by product

Crushftp

CVSS 9.8 for CVE-2023-43177

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

81.8%higher than 99.6% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2025-07-09 01:58

Last Seen:2025-08-31 21:50

Reporter:the-emmons

Written in:Python

Last commit:2024-06-14

Other exploits for CVE-2023-43177

Exploit for Code Injection in Crushftp

2024-07-05 entroychangGITHUB

Exploit for Code Injection in Crushftp

2024-04-30 MohammaddvdGITHUB

CrushFTP Remote Code Execution Exploit

2024-04-15 Ryan EmmonsZDTRuby

CrushFTP Remote Code Execution

2024-04-15 Christophe de la Fuente, Ryan Emmons, metasploit.comPACKETSTORMRuby

CrushFTP Unauthenticated RCE

2024-04-12 Ryan Emmons, Christophe De La FuenteMETASPLOITRuby

Exploit Code

README5 lines

## https://sploitus.com/exploit?id=A5280387-45E8-51A2-A163-674B8DE191AA
# CVE-2023-43177
CrushFTP &lt;= 10.5.1 Remote Code Execution

This repository holds the proof-of-concept RCE exploit developed during research.

Exploit Code

Share

Share on social media: