ryanjohnjames/cve-2025-34100-demoDemo web server
Demo web server
[!NOTE] Please note that this is just the PHP files for the website, to understand the CVE better and create a more effective PoC, visit https://nvd.nist.gov/vuln/detail/CVE-2025-34100
These files will not cause the CVE, but rather are the entry point to exploit the CVE. The CVE is found in the CMS.
Please put the files like this:
/var/www/html/biteinstall/
├── index.php
├── pages
│ ├── about.php
│ ├── home.php
│ ├── refund.php
│ ├── shop.php
│ └── thankyou.php
└── photo
├── cheeseburger.jpg
├── cookie.jpg
├── pizza.jpg
└── ramen.jpg
Ensure that in the refund.php file, the IP ADDRESS is correct!:
<form method="post" action="http://[YOUR IP ADDRESS FOR YOUR MACHINE]:80/themes/dashboard/assets/plugins/jquery-file-upload/server/php/" enctype="multipart/form-data">
<label>Attach a photo of your receipt</label><br>
<input type="file" name="files[]" />
<input type="submit" value="send" />
</form>
Wow, getting ideas for EH? Too bad, CVE is too old for you. How about trying a buffer overflow? I heard that's good.