CVE-2017-1000119

This Metasploit module exploits an authenticated file upload vulnerability in October CMS by bypassing blacklisted file extensions to achieve remote code execution via a malicious PHP file.

This repository contains a functional exploit for CVE-2017-1000119, which targets an upload protection bypass in October CMS leading to remote code execution. The exploit automates authentication, file upload, and command execution via a crafted PHP file.

This Metasploit module exploits an authenticated file upload vulnerability in October CMS by bypassing blacklisted file extensions to achieve remote code execution. It authenticates as a user with media upload permissions, uploads a malicious PHP file, and triggers execution via a GET request.