CVE-2007-6479
Dokeos 1.8.4 - Authenticated Arbitrary File Upload via Double Extension Bypass
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-6479. PoCs published by RoMaNcYxHaCkEr.
AI-analyzed exploit summary This is a writeup describing a file upload bypass vulnerability in Dokeos 1.8.4, allowing an attacker to upload a malicious PHP shell disguised as a .rar file. The exploit involves registering an account, uploading the shell via the user profile, and accessing it through a direct URL.
Description
Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php (aka the "My profile" page) in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI under main/upload/users/.
Exploits (1)
This is a writeup describing a file upload bypass vulnerability in Dokeos 1.8.4, allowing an attacker to upload a malicious PHP shell disguised as a .rar file. The exploit involves registering an account, uploading the shell via the user profile, and accessing it through a direct URL.