CMSimple 5.15 – Remote Code Execution (RCE) (Authenticated)

• Exploit Database
• 16 阅读

• 作者： Ahmet Ümit BAYRAM
  日期： 2024-06-03
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/52040/

• # Exploit Title: CMSimple 5.15 - Remote Command Execution
  # Date: 04/28/2024
  # Exploit Author: Ahmet Ümit BAYRAM
  # Vendor Homepage: https://www.cmsimple.org
  # Software Link: https://www.cmsimple.org/downloads_cmsimple50/CMSimple_5-15.zip
  # Version: latest
  # Tested on: MacOS
  
  # Log in to SimpleCMS.
  # Go to Settings > CMS
  # Append ",php" to the end of the Extensions_userfiles field and save it.
  # Navigate to Files > Media
  # Select and upload shell.php
  # Your shell is ready: https://{url}/userfiles/media/shell.php