Exploit for Unrestricted Upload of File with Dangerous Type in Churchdesk Churchrota

Church Rota version 2.6.4 is vulnerable to authenticated remote...

Churchdesk Church Rota Code Issue Vulnerability

Churchdesk Church Rota is a software for managing church tasks, personnel and related information from Churchdesk USA. The software centralizes task management, personnel and related information, thus helping users to use it for managing staff and volunteers. A security vulnerability exists in...

Church Rota 2.6.4 Shell Upload

import requests from pwn import listen CVE-2021-3164 Church Rota version 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file. The application is written primarily with PHP so we use PHP ...