MyBB CVE-2022-24734 远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-24734
• https://www.exploit-db.com/exploits/50924
• https://www.sentinelone.com/vulnerability-database/cve-2022-24734/
• https://www.zerodayinitiative.com/advisories/ZDI-22-503/
• https://github.com/lavclash75/mybb-CVE-2022-24734
• https://github.com/Altelus1/CVE-2022-24734
• https://medium.com/@_crac/cve-2022-24734-mybb-admin-cp-configuration-rce-aeee8613e737
• https://mybb.com/versions/security-issues/
• https://advisories.checkpoint.com/defense/advisories/public/2022/cpai-2022-0204.html
• https://avd.aquasec.com/nvd/2022/cve-2022-24734/
• https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2022-24734

Related Vulnerabilities

• PoCmybb-installer: MyBB Installation Panel - Detect
• PoCmybb-full-path-disclosure: MyBB - Full Path Disclosure
• PoCmybb-forum-install: MyBB Installation Panel - Detect