Back to directory
WRITEUP #998

Patch Diffing CVE-2023-28121 to Compromise a WooCommerce

Auth BypassAuthentication bypassPrivilege escalation
by@MrTuxracer(Julien Ahrens)
Program
-
Published
Jul 3, 2023
Added to HackDex
Jul 3, 2023
Read Full Writeuphttps://www.rcesecurity.com/2023/07/patch-diffing-cve-2023-28121-to-compromise-a-woocommerce/
RELATED WRITEUPS
Vulnerabilities in Open Source C2 Frameworks
RCEOS command injection
Breaking the Barrier: Admin Panel Takeover Worth $3500
Auth BypassAuthentication bypass
SAML Authentication Bypass Leading to Admin Panel Access
Auth BypassSAML
Breaking Down Barriers: Exploiting Authenticated IPC Clients
Auth BypassIPC client
Escalating From Reader To Contributor In Azure API Management
Privilege Escalation

Built with ❤️ by Shubham Rawat