
CVE-2019-16278
Directory transversal to remote code execution
exploitationremote-access-toolvulnerability-analysis+1
707 years ago

Directory transversal to remote code execution

Python PoC exploiting CVE-2026-38526 in Krayin CRM <= 2.2.x: authenticated PHP webshell upload via /admin/tinymce/upload leading to remote code…

Python PoC exploiting CVE-2026-38526 in Krayin CRM <= 2.2.x: authenticates, uploads a PHP webshell via /admin/tinymce/upload, and executes commands…