vances25/cve-2024-44871Python exploit for MoziloCMS <= 3.0.1 that uploads a PHP web shell via authenticated admin access, renames the file, and executes system commands on the target.
This script is an exploit tool designed for testing web applications running MoziloCMS. It allows an attacker to use admin logins to upload a PHP web shell via jpg file, rename the uploaded file to php, and send system commands to the target through the php file.
⚠️ WARNING: This script is for educational purposes only. Use it responsibly and ensure you have proper authorization before testing any system. Unauthorized use is illegal and unethical.
python3 main.py -u USERNAME -p PASSWORD -t TARGET_URL
ex: python exploit.py -u admin -p hunter2 -t http://example.com
note: DO NOT END URL WITH / and please specify http/https
https://www.exploit-db.com/exploits/52096 https://nvd.nist.gov/vuln/detail/CVE-2024-44871
