CVE-2018-1000094

This exploit leverages an authenticated file upload vulnerability in CMS Made Simple 2.2.5 to upload a malicious PHP file, then copies it to a web-accessible directory for remote code execution.

This repository contains a functional exploit for CVE-2018-1000094, an authenticated remote code execution vulnerability in CMS Made Simple 2.2.5. The exploit leverages file upload and copy mechanisms to achieve RCE via a crafted PHP payload.

This repository contains a functional exploit for CVE-2018-1000094, an authenticated remote code execution vulnerability in CMS Made Simple 2.2.5. The exploit leverages file upload and copy mechanisms to achieve RCE via a crafted PHP payload.

This Metasploit module exploits an authenticated file upload vulnerability in CMS Made Simple, allowing an attacker to upload a malicious file and rename it to a .php extension for remote code execution.