#cve-2022-37706

BoardLight

A Dolibarr CRM on a hidden vhost runs on default admin credentials and is vulnerable to authenticated PHP code injection (CVE-2023-30253), giving a shell as www-data. Its config file leaks database credentials reused for SSH as larissa. A SUID enlightenment binary is vulnerable to CVE-2022-37706, which is abused for a root shell.

• #dolibarr
• #cve-2023-30253
• #php-code-injection
• #rce
• #information-disclosure
• #password-reuse
• #ssh
• #enlightenment
• #cve-2022-37706
• #suid