Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-0372. PoCs published by StAkeR.
AI-analyzed exploit summary This exploit targets a file upload vulnerability in MemHT Portal <= 4.0.1, allowing remote code execution by uploading a malicious PHP file disguised as an avatar. It authenticates using provided credentials, uploads the payload, and provides a shell-like interface for command execution.
Description
Unrestricted file upload vulnerability in index.php in Miltenovik Manojlo MemHT Portal 4.0.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and an image content type via a users editProfile action, then accessing this file via a direct request to the file in images/avatar/uploaded/.
Exploits (1)
This exploit targets a file upload vulnerability in MemHT Portal <= 4.0.1, allowing remote code execution by uploading a malicious PHP file disguised as an avatar. It authenticates using provided credentials, uploads the payload, and provides a shell-like interface for command execution.