Index error pop from empty list

[Kali95739]

Can u make sure its not me Im getting index error pop from empty list

[manuelz120]

Hi, can you share some more details? Which version of SuiteCRM are you testing against?

And where does the index error occur? In this line?

https://github.com/manuelz120/CVE-2022-23940/blob/main/exploit.py#L80

[Kali95739]

I had a list of public suitecrm, not exactly sure on the version. If u have a way that I can get that lmk I will check and yes, I believe that line. Most of the ones it logged into have given the same response about the index error

[Kali95739]

If not all the ones it logged into hard to be exactly sure

[Kali95739]

Python version is python 3.8.10

[manuelz120]

Regarding the SCRM Version: You can find it out on the About-Page (e.g. http://localhost/index.php?module=Home&action=About).

I just reconfirmed that the exploit is working on version 8.0.3 and 7.12.4. You can try the same on your local machine by running the exploit against the vulnerable docker image included in this repo.

If you still run into errors, it would be great if you could provide the affected version and the output of response.text (content of the HTTP response).

[manuelz120]

I had a list of public suitecrm, not exactly sure on the version.

Just to be clear, runnings exploits against publicly available SuiteCRM versions without consent of the owner might be illegal.