syogod/cve-2023-40028CVE-2023-40028 is a security vulnerability affecting Ghost CMS versions prior to 5.59.1.
This repository contains a Proof-of-Concept (PoC) script designed to demonstrate the exploitation of CVE-2023-40028, a Local File Inclusion (LFI) vulnerability affecting Ghost CMS versions prior to 5.59.1. The vulnerability allows authenticated users to upload files that are symbolic links (symlinks), enabling attackers to access arbitrary files on the host system.
This PoC script will show how an attacker can upload a crafted zip file containing a symlink pointing to sensitive system files, potentially leading to information disclosure.
Disclaimer:
This script is for educational and research purposes only. It is the user's responsibility to ensure they have permission to test the targeted systems. Unauthorized access to systems is illegal and unethical. Always obtain explicit permission before testing systems for vulnerabilities.
The vulnerability exists due to improper handling of file uploads in Ghost CMS. Authenticated users can upload symbolic link files, which can be used to access sensitive files outside of the CMS’s intended directories.
Before using this PoC script, ensure you meet the following requirements:
requestsargparsejsonosshutiltimeYou can install the required libraries using pip:
pip install requests