CVE-2018-11736

This exploit leverages an arbitrary file upload vulnerability in Pluck CMS to upload a malicious .htaccess file, allowing PHP code execution via files with a .jpg extension. The PoC provides clear steps to exploit the vulnerability by bypassing file type restrictions.

This is a functional Rust-based exploit for CVE-2018-11736, targeting Pluck CMS. It uploads a malicious .htaccess file and a fake image to achieve RCE by coercing the server to interpret .jpg files as PHP scripts.