CVE-2008-6932
AlstraSoft SendIt Pro - Unauthenticated Arbitrary File Upload via submit_file.php
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-6932. PoCs published by ZoRLu.
AI-analyzed exploit summary This exploit leverages a file upload vulnerability in AlstraSoft SendIt Pro, allowing an attacker to upload a malicious PHP shell disguised as an image file (e.g., shell.php.pjpeg) and achieve remote code execution (RCE). The exploit involves bypassing file type restrictions by manipulating the file extension.
Description
Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in send/files/.
Exploits (1)
This exploit leverages a file upload vulnerability in AlstraSoft SendIt Pro, allowing an attacker to upload a malicious PHP shell disguised as an image file (e.g., shell.php.pjpeg) and achieve remote code execution (RCE). The exploit involves bypassing file type restrictions by manipulating the file extension.