EDB-48221

PoC

PHPKB Multi-Language 9 - 'image-upload.php' Authenticated Remote Code Execution

view exploit source exploit_dbtype webappsauthor Antonio Cannitopublished 2020-03-16catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-10386UShigh7.2Exploit
admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the admin/js/ directory.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan