EDB-49711
PoCDolibarr ERP 11.0.4 - File Upload Restrictions Bypass (Authenticated RCE)
view exploit source exploit_dbtype webappsauthor Andrea Gonzalezpublished 2021-03-25catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-14209US | high8.8 | Exploit | ||
Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar files can be uploaded.… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan