Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-40028 — CVE-2023-40028 PoC Exploit | Kitploit
Tools/GitHubGitHub/rvzsec/cve-2023-40028
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubrvzsec/cve-2023-40028

CVE-2023-40028

CVE-2023-40028 PoC Exploit

View Repository
311 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-40028 PoC Exploit

Symlink Upload Vulnerability in Ghost CMS Leading to Arbitrary File Read

POC Image

Vulnerability Details

CVE-2023-40028 is a vulnerability in Ghost CMS versions prior to 5.59.1, where authenticated users can upload symbolic links (symlinks) that lead to arbitrary file reading on the host system. The vulnerability can be exploited by leveraging the upload feature in Ghost CMS to place a symlink pointing to sensitive files. Once the symlink is uploaded, attackers can access the target file via a crafted HTTP request to the server.

Exploit Usage

root@kitploit:~
git clone https://github.com/rvizx/CVE-2023-40028
cd CVE-2023-40028
python3 exploit.py --url <http://target-ghost-cms> -u <username> -p <password>

References

  • CVE-2023-40028 on Mitre
  • Credits - PoC Exploit by 0xyassine
Download Tool