CVE-2019-12744

This exploit demonstrates an authenticated RCE vulnerability in Seeddms 5.1.10 by uploading a malicious PHP file and executing system commands. It follows a multi-step process involving login, token capture, file upload, and shell spawning.

This exploit demonstrates a remote command execution vulnerability in SeedDMS versions <5.1.11 due to unvalidated file upload. Attackers can upload a malicious PHP file and execute arbitrary commands via a crafted request.

This repository contains a functional Python exploit for CVE-2019-12744, which targets an unvalidated file upload vulnerability in SeedDMS versions < 5.1.11. The exploit authenticates, uploads a malicious PHP file, and executes arbitrary commands via a reverse shell.