CVE-2023-27372-POC

Overview

This code is a Python POC (Proof of Concept) for detecting whether a target website has the CVE-2023-27372 vulnerability.
You can run this code by providing a single URL or a text file containing multiple URLs.
Affected version: SPIP < 4.2.1. It has been verified that some websites disable phpinfo output or system functions. For accurate results, manual verification is recommended. The payload used in this code is:

s:19:"<?php phpinfo(); ?>";

Features

• Check whether the target website has the CVE-2023-27372 vulnerability.
• Supports a single URL and a text file containing multiple URLs.

Usage

1. Ensure the required Python version is installed.
2. Install the required dependencies: pip install -r requirements.txt.
3. Run the code with a single URL: python main.py -u <URL>.
4. Run the code with a text file containing multiple URLs: python main.py -t <text file path>.
5. Results for a single URL will be displayed in the terminal; for multiple URLs, they will be saved in a file named CVE-2023-27372-result.txt.

Notes

• Before running the code, ensure the target website is accessible.
• Only use this code under lawful authorization.
• The author assumes no responsibility for the use of this code and any consequences arising from it.