来源

关联漏洞

介绍

# Proof of Concept (PoC) for CVE-2023-40028

CVE-2023-40028 is a **vulnerability in Ghost CMS that allows arbitrary file reads through improper file handling.** This PoC demonstrates how the exploit works under controlled conditions. **Educational use only.**

**Reference:** Adapted from the original PoC by [0xyassine](https://github.com/0xyassine/CVE-2023-40028), rewritten in Python and applied to the HackTheBox challenge "LinkVortex."

### Summary:

1. **Vulnerability:** Arbitrary file read in Ghost CMS.
2. **Impact:** Access to sensitive files on the server.
3. **Fix:** Update to the latest Ghost CMS version.

**Usage:**
```
python3 ./CVE-2023-40028.py --url <http://abc.xyz> -u <username> -p <password>
```

**Use this information responsibly. Unauthorized exploitation is illegal.**

文件快照

 [4.0K]  /data/pocs/5ea1d6fb68df32c63b09a02234a6db715ae2e32b
├── [3.7K]  CVE-2023-40028.py
└── [ 797]  README.md

0 directories, 2 files

备注