Monstra CMS Authenticated Arbitrary File Upload
Posted by deepcore on July 11, 2018 – 10:34 pm
Monstra CMS 3.0.4 allows users to upload arbitrary files which leads to remote command execution on the remote server. An attacker may choose to upload a file containing PHP code and run this code by accessing the resulting PHP file. This Metasploit module was tested against Monstra CMS 3.0.4.
Post a reply
You must be logged in to post a comment.