SorceryIE/CVE-2023-41362_MyBB_ACP_RCE

PoC

view exploit source poc_in_githubauthor SorceryIEpublished 2023-09-11catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-41362US	high7.2	2.05% (81st)	Exploit	2023-08-29
MyBB before 1.8.36 allows Code Injection by users with certain high privileges. Templates in Admin CP intentionally use eval, and there was some validation of the input to eval, bu…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.