CVE-2019-25480
HIGHARMBot - Unauthenticated Arbitrary File Upload and Remote Code Execution via upload.php Path Traversal
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25480. PoCs published by prsecurity.
AI-analyzed exploit summary This exploit leverages a path traversal vulnerability in ARMBot's upload.php to write a PHP shell to an arbitrary location. The payload is a base64-encoded PHP snippet that executes arbitrary code, demonstrating remote code execution (RCE).
Description
ARMBot contains an unrestricted file upload vulnerability in upload.php that allows unauthenticated attackers to upload arbitrary files by manipulating the file parameter with path traversal sequences. Attackers can upload PHP files with traversal payloads ../public_html/ to write executable code to the web root and achieve remote code execution.
Exploits (1)
This exploit leverages a path traversal vulnerability in ARMBot's upload.php to write a PHP shell to an arbitrary location. The payload is a base64-encoded PHP snippet that executes arbitrary code, demonstrating remote code execution (RCE).
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N