CVE-2014-9567

This exploit leverages an arbitrary file upload vulnerability in ProjectSend r-561 by bypassing file extension restrictions via the 'name' parameter in the upload request. It allows an attacker to upload a malicious file (e.g., a PHP shell) to achieve remote code execution.

This Metasploit module exploits an unauthenticated arbitrary file upload vulnerability in ProjectSend (revisions 100-561) via 'process-upload.php', allowing remote code execution as the web server user.

This Metasploit module exploits an unauthenticated arbitrary file upload vulnerability in ProjectSend (CVE-2014-9567) by uploading a PHP payload via 'process-upload.php' and executing it to achieve remote code execution as the web server user.