CVE-2018-15139

This exploit leverages an authenticated file upload vulnerability in OpenEMR to achieve remote code execution by uploading a malicious PHP file. The script logs in as an admin, then uploads a file with a PHP content type to a vulnerable endpoint.

This exploit demonstrates an authenticated remote code execution vulnerability in OpenEMR versions prior to 5.0.1.4. It uploads a PHP webshell via the 'manage_site_files' interface, allowing arbitrary command execution.

This exploit targets CVE-2018-15139, an authenticated file upload vulnerability in OpenEMR < 5.0.1.4, allowing remote command execution via a malicious PHP file upload. The PoC uses Ruby with HTTPX to authenticate and upload a shell.