Acumatica customization publish webshell RCE

Customizer-role user imports a ZIP via CustomizationApi/import, publishBegin/End, writes Pages/.aspx to IIS webroot; invoke with ?c= set payload for cmd.exe. """Acumatica authenticated customization import/publish → ASPX webshell RCE.""" from future import annotations import base64 import io impo...