
CVE-2023-50564 - An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file.
CVE-2023-50564 An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file. This is an authenticated vulnerability.
Disclaimer: This code is meant for educational purposes only.
usage: CVE-2023-50564.py [-h] -H TARGET_HOST -u USER -p PASSWORD -lhost LHOST -lport LPORT
Clone the repo to your working directory

Move to the new directory and run the script to get usage directions

Run the script against your target

Mirabbas Ağalarov for discovering and reporthing the vulnerability