cve/2023/CVE-2023-36348.md

CVE-2023-36348

Description

POS Codekop v2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the filename parameter.

POC

Reference

• http://packetstormsecurity.com/files/173278/POS-Codekop-2.0-Shell-Upload.html
• https://www.youtube.com/watch?v=Ge0zqY0sGiQ
• https://yuyudhn.github.io/pos-codekop-vulnerability/

Github

No PoCs found on GitHub currently.