Novel Exploit: Dolibarr Code Injection (CVE-2022-40871)

Novel Exploit: Dolibarr Code Injection (CVE-2022-40871)

OS

2024.1.*
2020.3.*
2019.4.*

Apps

18.0.6.*
18.0.4.*
18.0.5.*
13.0.4.*
13.0.5.*
19.0.0.*
*.*
19.0.4.*
19.0.3.*
15.0.2.*

Screenshots from the blog posts

images/clymosbhyhlh31gn66szfd6rd.pngimages/clymosbhyhlh31gn66szfd6rd.png

Summary

In this post, we will uncover a novel (one-shot) exploit to pwn vulnerable Dolibarr ERP instances and get a reverse shell on the target machine. We will understand how the exploit works and what all steps are required to compromise the vulnerable target.

general

Description

@secatgourity

190 posts

Total vcoins

0

Social media links

Comments (0)