CVE-2018-11686

This exploit targets a remote command execution vulnerability in FlexPaper PHP Publish Service <= 2.3.6. It deletes the target configuration file, uploads a webshell, and provides an interactive shell to execute commands on the compromised system.

This PoC exploits CVE-2018-11686, an authentication bypass and command injection vulnerability in FlexPaper PHP Publish Service <= 2.3.6. It leverages unauthenticated access to delete config files and inject commands via the setup process.