cve-2021-3164

Church Rota versión 2.6.4 es vulnerable a la ejecución remota de código autenticada. El usuario no necesita tener permiso de carga de archivos para cargar y ejecutar un archivo arbitrario. Después de iniciar sesión en Church Rota, envía la siguiente solicitud, reemplazando con tu PHPSESSID:...

Exploit for Unrestricted Upload of File with Dangerous Type in Churchdesk Churchrota

Church Rota version 2.6.4 is vulnerable to authenticated remote...

Church Rota 2.6.4 Shell Upload

import requests from pwn import listen CVE-2021-3164 Church Rota version 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file. The application is written primarily with PHP so we use PHP ...

Churchdesk Church Rota Code Issue Vulnerability

Churchdesk Church Rota is a software for managing church tasks, personnel and related information from Churchdesk USA. The software centralizes task management, personnel and related information, thus helping users to use it for managing staff and volunteers. A security vulnerability exists in...