EDB-50943

PoC

m1k1o's Blog v.10 - Remote Code Execution (RCE) (Authenticated)

view exploit source exploit_dbtype webappsauthor Malte Vpublished 2022-05-23catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-23626US	high8.8	9.87% (96th)	Exploit	2022-02-08
m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions `imagecreatefrom` and `image` have not been checked properly. Although PHP issued warnings…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.