.. / CVE-2023-50917

• RCE
• Nuclei
• Web

Exploit for MajorDoMo thumb.php - OS Command Injection (CVE-2023-50917)

Description:

MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager.

Nuclei Template

View the template here CVE-2023-50917.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-50917.yaml

References: