CVE-2019-25647

EIP tracks 1 public exploit for CVE-2019-25647. PoCs published by Metin Yunus Kandemir.

AI-analyzed exploit summary This exploit demonstrates a remote command execution vulnerability in PhreeBooks ERP 5.2.3 by uploading a malicious PHP file through the Image Manager due to lack of file extension controls. It authenticates, uploads a reverse shell payload, and executes it to establish a connection to an attacker-controlled server.

PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing file extension controls. Attackers can upload malicious PHP files through the image manager endpoint and execute them to establish reverse shell connections and execute system commands.