CVE-2018-20166

CVE-2018-20166 — Rukovoditel 2.3.1 file-upload PM/CRM vulnerability Affects: Rukovoditel Project Management CRM version 2.3.1. The flaw is in index.php?module=configuration/save, where extension checks are mishandled and a PHP payload can be uploaded as a background image (e.g., PHP content with ...

Rukovoditel Project Management CRM 2.3.1 Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Rukovoditel Project Management/CRM 2.3.1 - Authenticated Remote Code Execution', 'Description' = %q This module...

Rukovoditel Project Management CRM 2.3.1 - Remote Code Execution Exploit

Exploit for php platform in category web applications This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Rukovoditel Project Management/CRM 2.3.1 - Authenticated...