CVE-2017-6090

This Metasploit module exploits an unauthenticated file upload vulnerability in phpCollab 2.5.1, allowing arbitrary PHP code execution under the context of the web server user. It uploads a malicious PHP file via a multipart form request and triggers it to achieve RCE.

This exploit demonstrates an unauthenticated arbitrary file upload vulnerability in PhpCollab 2.5.1, allowing an attacker to upload and execute malicious PHP files via a crafted HTTP POST request. The vulnerable code fails to properly filter file extensions, enabling remote code execution.

This repository provides a containerized environment for PhpCollab 2.5.1, which is vulnerable to CVE-2017-6090, a remote code execution vulnerability. It includes instructions for setting up the environment and exploiting the vulnerability using Metasploit.

This Metasploit module exploits an unauthenticated file upload vulnerability in phpCollab 2.5.1, allowing arbitrary PHP code execution via a malicious file upload to the 'logos_clients' directory.