Life insurance management system 1.0 file upload rce (authenticated) Vulnerability / Exploit
/
/
/
Exploits / Vulnerability Discovered : 2021-01-18 |
Type : webapps |
Platform : php
This exploit / vulnerability Life insurance management system 1.0 file upload rce (authenticated) is for educational purposes only and if it is used you will do on your own risk!
[+] Code ...
# Exploit Title: Life Insurance Management System 1.0 - File Upload RCE (Authenticated)
# Date: 15/1/2021
# Exploit Author: Aitor Herrero
# Vendor Homepage: https://www.sourcecodester.com
# Software Link: https://www.sourcecodester.com/php/14665/life-insurance-management-system-php-full-source-code.html
# Version: 1.0
# Tested on: Windows /linux /
Login in the application
Go to Clients and you can add new client o modify existent
Click examination botton and upload a test.php with content: