CVE-2020-23934

This exploit leverages an authenticated file upload vulnerability in RiteCMS 2.2.1 to achieve remote code execution by uploading a malicious PHP shell. The attacker can then execute arbitrary commands via HTTP requests to the uploaded file.

This exploit targets CVE-2020-23934, an authenticated remote code execution vulnerability in RiteCMS v2.2.1. It uploads a malicious PHP file via the filemanager functionality, which executes a reverse shell payload upon access.