CVE-2020-10963

This exploit leverages an unrestricted file upload vulnerability in Laravel Administrator 4 to upload a malicious PHP file disguised as a GIF, which executes a reverse shell when accessed. It requires authentication and targets the file upload functionality.

This exploit targets an unrestricted file upload vulnerability in Laravel Administrator 4, allowing authenticated users to upload a malicious PHP file disguised as an image. The payload executes a reverse shell upon access.