Exploit for CVE-2023-30253

kitploit · 2026-08-25

Description

PHP code injection vulnerability in Dolibarr 17.0.0.

Entry point

Parametertoken · request body

Pathwebsite/index.php

Authenticated code injection via website content: payload placed in PAGE_CONTENT and executed when page is rendered.

Affected Dolibarr Dolibarr Erp\/crm versions

Dolibarr Dolibarr Erp\/crm< 17.0.1

All known vulnerabilities by product

Usg Flex 50(W) Series Usg Flex H Series Usg20(W)-Vpn Series Zyxel Atp Series

CVSS 8.8 for CVE-2023-30253

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-08-25 04:19

Last Seen:2026-08-26 02:52

Reporter:KitPloit

Tags

DolibarrPHPcode injectionexploitDolibarr 17.0.0

Other exploits for CVE-2023-30253

Dolibarr-17.0.0-Exploit-CVE-2023-30253

2026-08-29 KitPloitKITPLOIT

CVE-2023-30253-exploit

2026-08-28 KitPloitKITPLOIT

Exploit-for-Dolibarr-17.0.0-CVE-2023-30253

2026-08-27 KitPloitKITPLOIT

POC-exploit-for-Dolibarr

2026-08-26 KitPloitKITPLOIT

CVE-2023-30253-Exploit

2026-08-26 KitPloitKITPLOIT

2026-08-25 KitPloitKITPLOIT

CVE-2023-30253-PoC

2026-08-25 KitPloitKITPLOIT

2026-08-24 KitPloitKITPLOIT

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-BLUETOOTHSTRAWBERRY-CVE-2023-30253
# CVE-2023-30253

Dolibarr 17.0.0 — эксплойт внедрения PHP-кода

![](https://assets.kitploit.com/production/public/readmes/23419/7224c18130c7344c6ad9c3f428a316f3af0960c96ef2cd322760fce2927926e2.png)