Description
An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 8 repositories
-
Rai2en/CVE-2023-50564_Pluck-v4.7.18_PoC ★ 18 · Jul 21, 2024
A Proof of Concept for CVE-2023-50564 vulnerability in Pluck CMS version 4.7.18
-
thefizzyfish/CVE-2023-50564-pluck ★ 4 · Aug 24, 2024
CVE-2023-50564 - An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file.
-
xpltive/CVE-2023-50564 ★ 1 · Dec 22, 2024
Pluck-CMS v4.7.18 RCE exploit
-
0xDTC/Pluck-CMS-v4.7.18-Remote-Code-Execution-CVE-2023-50564 ★ 1 · Oct 27, 2024
Refurbish exploit in bash
-
Mrterrestrial/CVE-2023-50564 ★ 1 · Oct 15, 2024
This script exploits the file upload feature in Pluck CMS v4.7.18 to upload a malicious PHP file, enabling remote access via a reverse shell. Once uploaded, this backdoor grants the attacker server a…
-
glynzr/CVE-2023-50564 ★ 0 · May 24, 2025
Pluck v4.7.18 - Remote Code Execution (RCE)
-
rwexecute/CVE-2023-50564 ★ 0 · Aug 17, 2024
Python Script to exploit CVE-2023-50564
-
ipuig/CVE-2023-50564 ★ 0 · Aug 2, 2024
CVE-2023-50564 PoC
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.