gmh5225/cve-2023-47253Proof-of-concept exploit for CVE-2023-47253, a remote code execution vulnerability in Qualitor <= 8.20 via the eval() function in processVariavel.php.
CVE-2023-47253 | Qualitor <= 8.20 RCE
Qualitor is a platform for business process management, and this system is present in various companies in Brazil that can be identified simply by using Google dorking.
Our team identified a vulnerability in the application susceptible to Remote Code Execution (RCE), which allows remote execution of PHP code, such as functions like system() and passthru().
In the code below, you can see the source code of the vulnerable page calling an eval() function, which enables the remote execution of codes. This occurs in the file /html/ad/adpesquisasql/request/processVariavel.php.
include("../../../../configLingua.php");
header("Content-type: text/javascript; charset=".$_SESSION['A_appEncoding']);
header("Expires: Thu, 01 Jan 1990 00:00:00 GMT");
$strReturn = '';
eval($_REQUEST['gridValoresPopHidden']);
importClass('AdPesquisaSqlVar');
$bean = new AdPesquisaSqlVarBean();
$vo = $bean->povoaVoComArray($_REQUEST);
if (in_array($_REQUEST['nmalias'],
array('dtiniciomesatual',
'dtfimmesatual',
'dtiniciomespassado',
Just access the URL with your PHP code in "gridValoresPopHidden" parameter.
https://www.linkedin.com/in/xvinicius/
https://www.linkedin.com/in/hairrison-wenning-4631a4124/