Skip to content

Instantly share code, notes, and snippets.

@ImHades101

ImHades101/Detail_RCE_on_Unisharp_Laravel_Filemanager Secret

Created June 5, 2024 09:39
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save ImHades101/338a06816ef97262ba632af9c78b78ca to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save ImHades101/338a06816ef97262ba632af9c78b78ca to your computer and use it in GitHub Desktop.
Download ZIP
RCE through Upload Shell on Unisharp Laravel Filemanager
Raw
Detail_RCE_on_Unisharp_Laravel_Filemanager
In the "Unisharp laravel filemanager" extension, there is an upload shell vulnerability, which leads to Remote Code Execution (RCE). Although the application has mechanisms to prevent users from uploading files with extension `PHP`, `HTML` and mimetype files `text/x-php`, `text/html`, `text/plain`, however, attackers Attackers can bypass this through using a valid mimetype and inserting the `.` character after the `php` file extension (e.g. `filename.php.`).
The vulnerability affects all versions including the latest version `v2.9.0`
Vulnerability location `[POST] /laravel-filemanager/upload`
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment