CVE-2023-30330: 
SoftExpert Excellence Suite vulnerability analysis and mitigation

SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gn_defaultframe/2.0/defaultframe_filter.php. The vulnerability was discovered in May 2023 and assigned CVE-2023-30330. The affected versions include 2.0.15.31 and 2.0.15.115 (GitHub PoC, Exploit DB).

The vulnerability exists in the PHP function /se/v42300/generic/gn_defaultframe/2.0/defaultframe_filter.php that includes a file with extension '.inc' in a base64 encoding format through the 'managerPath' parameter in a POST request. The function uses require_once() to include files, which can be exploited to execute Remote Code Execution by including poisoned logs. The vulnerability has been assigned a CVSS v3.1 base score of 9.8 CRITICAL (Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) (NVD).

The vulnerability allows attackers to perform Local File Inclusion which can be escalated to Remote Code Execution. This could lead to unauthorized access to system files and potential execution of arbitrary code on the affected system (GitHub PoC).

Public exploits are available that demonstrate how to achieve Local File Inclusion and escalate it to Remote Code Execution. The attack requires authentication to the system. Proof of Concept code has been published showing how to exploit the vulnerability through log poisoning and file inclusion techniques (Exploit DB, GitHub PoC).

Users should upgrade to SoftExpert Excellence Suite version 2.1.3 or later to address this vulnerability (NVD).