Exploit for CVE-2023-36845

kitploit · 2026-08-26

Description

PHP external variable modification in Juniper JunOS J-Web (CVE-2023-36845).

Entry point

ParameterPHPRC · query param

Path/?PHPRC=/dev/fd/0

Pre-auth RCE via PHPRC parameter injection to modify PHP execution environment

Affected Juniper Junos versions

Juniper Junos< 20.4, 21.1, 21.2, 21.3, 21.4, 22.1, 22.2, 22.3, 22.4, 23.2

All known vulnerabilities by product

CVSS 9.8 for CVE-2023-36845

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-08-26 00:36

Last Seen:2026-08-26 05:56

Reporter:KitPloit

Tags

JunOS J-WebPHP variable modificationexternal variableJuniper

Other exploits for CVE-2023-36845

2026-08-27 KitPloitKITPLOIT

Juniper-CVE-2023-36845-Mass-Hunting

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

CVE-2023-36845-POC

2026-08-27 KitPloitKITPLOIT

ansible-cve-2023-36845

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

CVE-2023-36844_Juniper_RCE

2026-08-27 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-KOPFJAGER007-CVE-2023-36845
# CVE-2023-36845

استغلال ثغرة تعديل المتغيرات الخارجية في PHP في واجهة J-Web الخاصة بـ Juniper JunOS (CVE-2023-36845).