high8.8Public exploit code
CVE-2023-36348
POS Codekop v2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the filename parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- POS Codekop v2.0 - Authenticated Remote Code Execution (RCE)2023-07-03 · webapps · php
Impact
POS Codekop v2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the filename parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codekop | Codekop | Version 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/173278/POS-Codekop-2.0-Shell-Upload.html
- https://www.youtube.com/watch?v=Ge0zqY0sGiQ
- https://yuyudhn.github.io/pos-codekop-vulnerability/
- http://packetstormsecurity.com/files/173278/POS-Codekop-2.0-Shell-Upload.html
- https://www.youtube.com/watch?v=Ge0zqY0sGiQ
- https://yuyudhn.github.io/pos-codekop-vulnerability/